CVE-2026-20157

Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities

State: Published
Severity: 7.5 High
Published: Jul 15, 2026
Updated: Aug 14, 2026
Reserved: Oct 8, 2025

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20157 are related to missing encryption that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-311.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	cisco

Weaknesses

CWE-311 Missing Encryption of Sensitive Data

Affected Products

Product	Versions
Cisco RoomOS SoftwareCisco	RoomOS 10.11.2.2Affected RoomOS 10.15.2.2Affected RoomOS 11.5.4.6Affected RoomOS 11.5.2.4Affected RoomOS 10.8.2.5Affected RoomOS 10.11.5.2Affected RoomOS 10.11.3.0Affected RoomOS 10.15.5.3Affected RoomOS 10.19.2.2Affected RoomOS 11.1.3.1Affected RoomOS 10.11.6.0Affected RoomOS 10.19.3.0Affected RoomOS 10.19.4.2Affected RoomOS 10.3.2.4Affected RoomOS 10.3.4.0Affected RoomOS 10.15.3.0Affected RoomOS 11.1.4.1Affected RoomOS 11.14.2.3Affected RoomOS 11.1.2.4Affected RoomOS 10.8.3.1Affected RoomOS 11.14.2.1Affected RoomOS 10.3.3.0Affected RoomOS 10.8.4.0Affected RoomOS 10.15.4.1Affected RoomOS 10.19.5.6Affected and 43 more versions

Product

Versions

Cisco RoomOS SoftwareCisco

RoomOS 10.11.2.2Affected
RoomOS 10.15.2.2Affected
RoomOS 11.5.4.6Affected
RoomOS 11.5.2.4Affected
RoomOS 10.8.2.5Affected
RoomOS 10.11.5.2Affected
RoomOS 10.11.3.0Affected
RoomOS 10.15.5.3Affected
RoomOS 10.19.2.2Affected
RoomOS 11.1.3.1Affected
RoomOS 10.11.6.0Affected
RoomOS 10.19.3.0Affected
RoomOS 10.19.4.2Affected
RoomOS 10.3.2.4Affected
RoomOS 10.3.4.0Affected
RoomOS 10.15.3.0Affected
RoomOS 11.1.4.1Affected
RoomOS 11.14.2.3Affected
RoomOS 11.1.2.4Affected
RoomOS 10.8.3.1Affected
RoomOS 11.14.2.1Affected
RoomOS 10.3.3.0Affected
RoomOS 10.8.4.0Affected
RoomOS 10.15.4.1Affected
RoomOS 10.19.5.6Affected
and 43 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.