CVE-2026-20107

CVE-2026-20107 describes a denial-of-service vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC). This flaw, stemming from insufficient input validation, allows an authenticated, local attacker with CLI access to trigger an unexpected device reload by issuing crafted commands. Rated Medium severity (CVSS 5.5), successful exploitation leads to a DoS condition. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, though it has garnered minimal community discussion and media coverage.