BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2026-20156Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20156 are related to improper restriction of operations within the bounds of a memory buffer that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-119.

9.8 CRITICALEPSS 0.45%Not in KEVNVD: Undergoing Analysis

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.1HIGH3.1cisco (CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CVE ID
CVE-2026-20156
Status
Undergoing Analysis
Assigner (CNA)
cisco
Published
Jul 15, 2026
Last modified
2026-10-24 21:10 UTC
Weaknesses
  • CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 08:31 UTC.