CVE-2026-20321

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller (APIC) (affected versions not specified)

Description An authenticated remote attacker with administrative credentials can execute arbitrary commands as the root user on the underlying operating system of the device. This issue occurs due to insufficient input validation of user-controlled command arguments within the web-based management API. An attacker can trigger this by sending crafted input through the API.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.