CVE-2026-20289 Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

What is CVE-2026-20289?

CVE-2026-20289 is a medium-severity vulnerability in Cisco RoomOS Software, published on 5 Aug 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.

Weakness: CWE-532

Which versions are affected by CVE-2026-20289?

It affects 2 products.

Products include Cisco Roomos, Cisco Roomos Cloud.

How do I fix CVE-2026-20289?

No fix has been published for CVE-2026-20289 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-20289 being exploited?

There is no known exploitation of CVE-2026-20289 in the wild and no public exploit code.

Other vulnerabilities in Cisco RoomOS Software

• CVE-2026-20150 Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities High 8.8
• CVE-2019-15288 Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability High 8.8
• CVE-2026-20156 Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities High 8.1
• CVE-2026-20153 Cisco RoomOS Security Hardening Release - Input Validation Vulnerabilities High 7.5
• CVE-2026-20157 Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j6mf-566j-jp3c.