CVE-2026-20157

A vulnerability in the USB driver of Cisco RoomOS allows an unauthenticated attacker with physical access to the USB port to execute arbitrary code with root privileges. The issue is due to insufficient boundary checks, leading to a buffer overflow.

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This is due to logging of sensitive data, and exploitation involves enabling a specific logging level and collecting system logs. Successful exploitation could reveal user login credentials.

CVE-2026-20187 involves improper handling of exceptional conditions in Cisco RoomOS software. It was discovered during an internal security review and addressed in a hardening release.

As part of an internal security review of Cisco RoomOS, multiple vulnerabilities related to improper control of a resource through its lifetime were identified. These flaws are classified under CWE-664 and have been addressed in a software hardening release.

As part of an internal security review of Cisco RoomOS, a vulnerability related to improper restriction of operations within a memory buffer (CWE-119) was identified. This flaw could allow an attacker to perform unauthorized memory operations.

As part of an internal security review of Cisco RoomOS, multiple vulnerabilities related to improper input validation (CWE-20) were identified. These flaws could allow an attacker to manipulate input data, potentially leading to unauthorized actions.

As part of an internal security review of Cisco RoomOS, multiple vulnerabilities related to improper access control (CWE-284) were identified. These vulnerabilities have been addressed in a software hardening release.