CVE-2026-20107Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. To exploit this vulnerability, the attacker must have valid user credentials and any role that includes CLI access. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by issuing crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-1220

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-02-25); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-25: 1Mentions · 2026-02-28: 1Technical Details · 2026-02-25: 1Technical Details · 2026-02-28: 102-2502-28
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-20107 A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, local attacker to cause a… https://www.cve.org/CVERecord?id=CVE-2026-20107

    Post summary

    A new CVE (CVE-2026-20107) affecting Cisco APIC's Object Model CLI component is disclosed, indicating potential local authenticated exploitation.

    00000168
    56.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-20107 Local Authenticated Denial of Service Vulnerability in Cisco APIC Object Model CLI https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20107

    Post summary

    The text announces CVE-2026-20107, a local authenticated denial‑of‑service vulnerability in Cisco APIC Object Model CLI, without providing PoC, exploit, or patch details.

    0000037
    4.0K followersView on X

Explore more