CVE-2026-20156
Full vulnerability record from the local CVENow database.
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20156 are related to improper restriction of operations within the bounds of a memory buffer that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-119.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Undergoing Analysis
Source identifier
Published
2026-07-15 17:16:47.380000
Last modified
2026-10-24 21:10:00.130000
View original CVE JSON
{
"id": "CVE-2026-20156",
"sourceIdentifier": "[email protected]",
"published": "2026-07-15T17:16:47.380",
"lastModified": "2026-10-24T21:10:00.130",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20156 are related to improper restriction of operations within the bounds of a memory buffer that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-119."
},
{
"lang": "es",
"value": "Como parte del compromiso continuo de Cisco con la seguridad proactiva y la calidad del producto, el equipo de ingeniería de Cisco RoomOS ha llevado a cabo una revisión de seguridad interna exhaustiva. Esta revisión resultó en una versión de endurecimiento de software que aborda múltiples vulnerabilidades descubiertas internamente.\n\nLas vulnerabilidades rastreadas por CVE-2026-20156 están relacionadas con la restricción inadecuada de operaciones dentro de los límites de un búfer de memoria que se agrupan bajo el pilar de la enumeración de debilidades comunes (CWE) CWE-119."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco RoomOS Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "RoomOS 10.11.2.2",
"status": "affected"
},
{
"version": "RoomOS 10.15.2.2",
"status": "affected"
},
{
"version": "RoomOS 11.5.4.6",
"status": "affected"
},
{
"version": "RoomOS 11.5.2.4",
"status": "affected"
},
{
"version": "RoomOS 10.8.2.5",
"status": "affected"
},
{
"version": "RoomOS 10.11.5.2",
"status": "affected"
},
{
"version": "RoomOS 10.11.3.0",
"status": "affected"
},
{
"version": "RoomOS 10.15.5.3",
"status": "affected"
},
{
"version": "RoomOS 10.19.2.2",
"status": "affected"
},
{
"version": "RoomOS 11.1.3.1",
"status": "affected"
},
{
"version": "RoomOS 10.11.6.0",
"status": "affected"
},
{
"version": "RoomOS 10.19.3.0",
"status": "affected"
},
{
"version": "RoomOS 10.19.4.2",
"status": "affected"
},
{
"version": "RoomOS 10.3.2.4",
"status": "affected"
},
{
"version": "RoomOS 10.3.4.0",
"status": "affected"
},
{
"version": "RoomOS 10.15.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.1.4.1",
"status": "affected"
},
{
"version": "RoomOS 11.14.2.3",
"status": "affected"
},
{
"version": "RoomOS 11.1.2.4",
"status": "affected"
},
{
"version": "RoomOS 10.8.3.1",
"status": "affected"
},
{
"version": "RoomOS 11.14.2.1",
"status": "affected"
},
{
"version": "RoomOS 10.3.3.0",
"status": "affected"
},
{
"version": "RoomOS 10.8.4.0",
"status": "affected"
},
{
"version": "RoomOS 10.15.4.1",
"status": "affected"
},
{
"version": "RoomOS 10.19.5.6",
"status": "affected"
},
{
"version": "RoomOS 10.11.4.1",
"status": "affected"
},
{
"version": "RoomOS 11.9.3.1",
"status": "affected"
},
{
"version": "RoomOS 11.5.3.3",
"status": "affected"
},
{
"version": "RoomOS 10.3.2.0",
"status": "affected"
},
{
"version": "RoomOS 11.9.2.4",
"status": "affected"
},
{
"version": "RoomOS 11.14.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.17.2.2",
"status": "affected"
},
{
"version": "RoomOS 11.14.4.0",
"status": "affected"
},
{
"version": "RoomOS 10.19 StepUpg",
"status": "affected"
},
{
"version": "RoomOS 11.17.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.20.2.3",
"status": "affected"
},
{
"version": "RoomOS 11.14.5.0",
"status": "affected"
},
{
"version": "RoomOS 11.17.4.0",
"status": "affected"
},
{
"version": "RoomOS 11.20.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.23.1.6",
"status": "affected"
},
{
"version": "RoomOS 11.23.1.8",
"status": "affected"
},
{
"version": "RoomOS 11.24.1.5",
"status": "affected"
},
{
"version": "RoomOS 11.24.2.4",
"status": "affected"
},
{
"version": "RoomOS 11.24.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.24.4.1",
"status": "affected"
},
{
"version": "RoomOS 11.27.2.0",
"status": "affected"
},
{
"version": "RoomOS 11.28.1.3",
"status": "affected"
},
{
"version": "RoomOS 11.27.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.31.1.5",
"status": "affected"
},
{
"version": "RoomOS 11.27.4.0",
"status": "affected"
},
{
"version": "RoomOS 11.32.2.1",
"status": "affected"
},
{
"version": "RoomOS 11.33.1.7",
"status": "affected"
},
{
"version": "RoomOS 26.0.1.2",
"status": "affected"
},
{
"version": "RoomOS 11.34.1.2",
"status": "affected"
},
{
"version": "RoomOS 11.32.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.27.5.0",
"status": "affected"
},
{
"version": "RoomOS 11.32.4.0",
"status": "affected"
},
{
"version": "RoomOS 26.1.1.5",
"status": "affected"
},
{
"version": "RoomOS 11.35.1.2",
"status": "affected"
},
{
"version": "RoomOS 26.2.2.2",
"status": "affected"
},
{
"version": "RoomOS 11.32.5.1",
"status": "affected"
},
{
"version": "RoomOS 26.4.1.6",
"status": "affected"
},
{
"version": "RoomOS 26.4.1.4",
"status": "affected"
},
{
"version": "RoomOS 26.3.1.3",
"status": "affected"
},
{
"version": "RoomOS 11.36.1.1",
"status": "affected"
},
{
"version": "RoomOS 11.37.1.0",
"status": "affected"
},
{
"version": "RoomOS 26.5.2.0",
"status": "affected"
},
{
"version": "RoomOS 11.38.1.1",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-07-15T18:05:33.626503Z",
"id": "CVE-2026-20156",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.32.6.0",
"matchCriteriaId": "2DAB6FC3-5699-48C7-9CCE-81F9BF3811F2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "26.0.1.2",
"versionEndExcluding": "26.5.2.2",
"matchCriteriaId": "B625A5DE-98DE-44D5-9044-939413A66689"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:roomos_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.39.1.1",
"matchCriteriaId": "AC956F89-2FDE-4CD9-838A-8CF133177236"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:roomos_cloud:*:*:*:*:*:*:*:*",
"versionStartIncluding": "26.0.1.2",
"versionEndExcluding": "26.7.1.7",
"matchCriteriaId": "4A01FB2F-C564-428C-912C-175920AEF60C"
}
]
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}