CVE-2026-20289
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This is due to logging of sensitive data, and exploitation involves enabling a specific logging level and collecting system logs. Successful exploitation could reveal user login credentials.
Risk Assessment
The risk involves potential leakage of authentication data, which could lead to unauthorized access and further compromise.
Recommendation
It is recommended to restrict the ability to change logging levels for low-privileged users and to monitor logs for suspicious activity. Also consider applying vendor updates when available.
Other vulnerabilities in Cisco RoomOS
See all- CVE-2026-20302Medium
A vulnerability in the USB driver of Cisco RoomOS allows an unauthenticated attacker with physical access to the USB port to execute arbitrary code with root privileges. The issue is due to insufficient boundary checks, leading to a buffer overflow.
- CVE-2026-20187High
CVE-2026-20187 involves improper handling of exceptional conditions in Cisco RoomOS software. It was discovered during an internal security review and addressed in a hardening release.
- CVE-2026-20158High
As part of an internal security review of Cisco RoomOS, multiple vulnerabilities related to improper control of a resource through its lifetime were identified. These flaws are classified under CWE-664 and have been addressed in a software hardening release.
- CVE-2026-20157High
The vulnerability in Cisco RoomOS is due to missing encryption, which could lead to exposure of sensitive data. The issue was discovered during an internal security review and addressed in a software hardening release.
- CVE-2026-20156High
As part of an internal security review of Cisco RoomOS, a vulnerability related to improper restriction of operations within a memory buffer (CWE-119) was identified. This flaw could allow an attacker to perform unauthorized memory operations.
- CVE-2026-20153High
As part of an internal security review of Cisco RoomOS, multiple vulnerabilities related to improper input validation (CWE-20) were identified. These flaws could allow an attacker to manipulate input data, potentially leading to unauthorized actions.
- CVE-2026-20150High
As part of an internal security review of Cisco RoomOS, multiple vulnerabilities related to improper access control (CWE-284) were identified. These vulnerabilities have been addressed in a software hardening release.
Original NVD description (English source)
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.