BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2026-20157Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20157 are related to missing encryption that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-311.

9.8 CRITICALEPSS 0.19%Not in KEVNVD: Undergoing Analysis

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5HIGH3.1cisco (CNA)CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CVE ID
CVE-2026-20157
Status
Undergoing Analysis
Assigner (CNA)
cisco
Published
Jul 15, 2026
Last modified
2026-10-24 21:10 UTC
Weaknesses
  • CWE-311 · Missing Encryption of Sensitive Data

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 08:31 UTC.