CVE-2026-20157
Modified
Modified - Updated After Analysis
Missing Encryption in Cisco RoomOS
Vulnerability report for CVE-2026-20157, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-07-15
Last updated on: 2026-08-14
Assigner: Cisco Systems, Inc.
Description
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20157 are related to missing encryption that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-311.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cisco | roomos | From 26.0.1.2 (inc) to 26.5.2.2 (exc) |
| cisco | roomos | to 11.32.6.0 (exc) |
| cisco | roomos_cloud | to 11.39.1.1 (exc) |
| cisco | roomos_cloud | From 26.0.1.2 (inc) to 26.7.1.7 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-311 | The product does not encrypt sensitive or critical information before storage or transmission. |
