Vulnerability Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20157 are related to missing encryption that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-311.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Roomos | < 11.32.6.0 |
| Cisco | Roomos Cloud | < 11.39.1.1 |
Related Weaknesses (CWE)
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ciVendor Advisory
- https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Lev
FAQ
What is CVE-2026-20157?
CVE-2026-20157 is a vulnerability with a CVSS score of 7.5 (HIGH). As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a sof...
How severe is CVE-2026-20157?
CVE-2026-20157 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-20157?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Roomos, Cisco Roomos Cloud.