Riskcovery

CVE-2026-20289

Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

State
Published
Severity
5.7 Medium
Published
Aug 5, 2026
Updated
Aug 5, 2026
Reserved
Oct 8, 2025

Read the record on cve.org

Description

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information.

This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.

Scores

CVSSScoreVectorSource
3.15.7 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:Ncisco

Weaknesses

  • CWE-532 Insertion of Sensitive Information into Log File

Affected Products

ProductVersions
Cisco RoomOS SoftwareCisco
  • RoomOS 10.11.2.2Affected
  • RoomOS 10.15.2.2Affected
  • RoomOS 11.5.4.6Affected
  • RoomOS 11.5.2.4Affected
  • RoomOS 10.8.2.5Affected
  • RoomOS 10.11.5.2Affected
  • RoomOS 10.11.3.0Affected
  • RoomOS 10.15.5.3Affected
  • RoomOS 10.19.2.2Affected
  • RoomOS 11.1.3.1Affected
  • RoomOS 10.11.6.0Affected
  • RoomOS 10.19.3.0Affected
  • RoomOS 10.19.4.2Affected
  • RoomOS 10.3.2.4Affected
  • RoomOS 10.3.4.0Affected
  • RoomOS 10.15.3.0Affected
  • RoomOS 11.1.4.1Affected
  • RoomOS 11.14.2.3Affected
  • RoomOS 11.1.2.4Affected
  • RoomOS 10.8.3.1Affected
  • RoomOS 11.14.2.1Affected
  • RoomOS 10.3.3.0Affected
  • RoomOS 10.8.4.0Affected
  • RoomOS 10.15.4.1Affected
  • RoomOS 10.19.5.6Affected
  • and 43 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.