CVE-2026-20150

CVE-2026-20150 concerns Cisco RoomOS, detailing improper access control (CWE-284). CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; impact: high across confidentiality, integrity, availability; vector: network, no user interaction, low privileges required. A Cisco software hardening release is cite...

CVE-2026-20150 Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

Cisco RoomOS Security Hardening Release: July 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These...

PT-2026-60220

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description Cisco RoomOS contains multiple issues related to improper input validation. A remote attacker could exploit these flaws to cause a denial of service DoS, which is a condition where the...

CVE-2026-20156: Improper Restriction of Operations within the Bounds of a Memory Buffer

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

PT-2026-60222

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description An internal security review identified issues related to missing encryption, which falls under the Common Weakness Enumeration CWE Pillar CWE-311. Recommendations At the moment, there is...

CVE-2026-20157: Missing Encryption of Sensitive Data

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

PT-2026-60219

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description Improper access control issues exist within the operating system. A remote attacker could exploit these flaws to bypass existing security restrictions and elevate their privileges...

CVE-2026-20150: Improper Access Control

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

PT-2026-60221

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description Multiple issues exist due to improper restriction of operations within the bounds of a memory buffer. This memory buffer overflow could allow a remote attacker to execute arbitrary code ...

CVE-2026-20187: Improper Check or Handling of Exceptional Conditions

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-20153: Improper Input Validation

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

PT-2026-60224

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description This issue involves the improper handling of exceptional conditions. A remote attacker could exploit this flaw to cause a denial of service DoS, which is a condition where a system becom...

CVE-2026-20158: Improper Control of a Resource Through its Lifetime

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

Cisco Advance Notification for Publication of July 15, 2026, Security Advisories

On July 15, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco RoomOS Security Hardening Release: July 2026...

Cisco TelePresence CE RoomOS DoS

The vulnerability of Cisco TelePresence CE and RoomOS software is related to improper validation of certain types of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability fixed in Cisco TelePresence Collaboration Endpoint

Cisco has fixed a vulnerability in Cisco TelePresence Collaboration Endpoint and RoomOS Software. The vulnerability is in how the text viewer system does not perform sufficient input control. This can be exploited by unauthenticated remote attackers, leading to a denial-of-service DoS and affecti...

Cisco TelePresence Collaboration Endpoint Software and RoomOS Software DoS (cisco-sa-tce-roomos-dos-9V9jrC2q)

According to its self-reported version, Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service is affected by a vulnerability. - A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software cou...

CVE-2026-20119

A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation...

CVE-2026-20119

A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation...