CVE-2026-20289
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.
Severity
MEDIUM
CVSS score
6.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-05 17:16:49.733000
Last modified
2026-10-23 21:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-20289",
"sourceIdentifier": "[email protected]",
"published": "2026-08-05T17:16:49.733",
"lastModified": "2026-10-23T21:10:00.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information.\r\n\r\nThis vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el subsistema de registro de Cisco RoomOS podría permitir a un atacante local y autenticado con privilegios bajos acceder a información sensible.\n\nEsta vulnerabilidad se debe al registro de información sensible. Un atacante podría explotar esta vulnerabilidad al habilitar un nivel de registro específico y luego recopilar los registros del sistema. Un exploit exitoso podría permitir al atacante ver información sensible como credenciales de inicio de sesión de usuario."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco RoomOS Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "RoomOS 10.11.2.2",
"status": "affected"
},
{
"version": "RoomOS 10.15.2.2",
"status": "affected"
},
{
"version": "RoomOS 11.5.4.6",
"status": "affected"
},
{
"version": "RoomOS 11.5.2.4",
"status": "affected"
},
{
"version": "RoomOS 10.8.2.5",
"status": "affected"
},
{
"version": "RoomOS 10.11.5.2",
"status": "affected"
},
{
"version": "RoomOS 10.11.3.0",
"status": "affected"
},
{
"version": "RoomOS 10.15.5.3",
"status": "affected"
},
{
"version": "RoomOS 10.19.2.2",
"status": "affected"
},
{
"version": "RoomOS 11.1.3.1",
"status": "affected"
},
{
"version": "RoomOS 10.11.6.0",
"status": "affected"
},
{
"version": "RoomOS 10.19.3.0",
"status": "affected"
},
{
"version": "RoomOS 10.19.4.2",
"status": "affected"
},
{
"version": "RoomOS 10.3.2.4",
"status": "affected"
},
{
"version": "RoomOS 10.3.4.0",
"status": "affected"
},
{
"version": "RoomOS 10.15.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.1.4.1",
"status": "affected"
},
{
"version": "RoomOS 11.14.2.3",
"status": "affected"
},
{
"version": "RoomOS 11.1.2.4",
"status": "affected"
},
{
"version": "RoomOS 10.8.3.1",
"status": "affected"
},
{
"version": "RoomOS 11.14.2.1",
"status": "affected"
},
{
"version": "RoomOS 10.3.3.0",
"status": "affected"
},
{
"version": "RoomOS 10.8.4.0",
"status": "affected"
},
{
"version": "RoomOS 10.15.4.1",
"status": "affected"
},
{
"version": "RoomOS 10.19.5.6",
"status": "affected"
},
{
"version": "RoomOS 10.11.4.1",
"status": "affected"
},
{
"version": "RoomOS 11.9.3.1",
"status": "affected"
},
{
"version": "RoomOS 11.5.3.3",
"status": "affected"
},
{
"version": "RoomOS 10.3.2.0",
"status": "affected"
},
{
"version": "RoomOS 11.9.2.4",
"status": "affected"
},
{
"version": "RoomOS 11.14.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.17.2.2",
"status": "affected"
},
{
"version": "RoomOS 11.14.4.0",
"status": "affected"
},
{
"version": "RoomOS 10.19 StepUpg",
"status": "affected"
},
{
"version": "RoomOS 11.17.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.20.2.3",
"status": "affected"
},
{
"version": "RoomOS 11.14.5.0",
"status": "affected"
},
{
"version": "RoomOS 11.17.4.0",
"status": "affected"
},
{
"version": "RoomOS 11.20.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.23.1.6",
"status": "affected"
},
{
"version": "RoomOS 11.23.1.8",
"status": "affected"
},
{
"version": "RoomOS 11.24.1.5",
"status": "affected"
},
{
"version": "RoomOS 11.24.2.4",
"status": "affected"
},
{
"version": "RoomOS 11.24.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.24.4.1",
"status": "affected"
},
{
"version": "RoomOS 11.27.2.0",
"status": "affected"
},
{
"version": "RoomOS 11.28.1.3",
"status": "affected"
},
{
"version": "RoomOS 11.27.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.31.1.5",
"status": "affected"
},
{
"version": "RoomOS 11.27.4.0",
"status": "affected"
},
{
"version": "RoomOS 11.32.2.1",
"status": "affected"
},
{
"version": "RoomOS 11.33.1.7",
"status": "affected"
},
{
"version": "RoomOS 26.0.1.2",
"status": "affected"
},
{
"version": "RoomOS 11.34.1.2",
"status": "affected"
},
{
"version": "RoomOS 11.32.3.0",
"status": "affected"
},
{
"version": "RoomOS 11.27.5.0",
"status": "affected"
},
{
"version": "RoomOS 11.32.4.0",
"status": "affected"
},
{
"version": "RoomOS 26.1.1.5",
"status": "affected"
},
{
"version": "RoomOS 11.35.1.2",
"status": "affected"
},
{
"version": "RoomOS 26.2.2.2",
"status": "affected"
},
{
"version": "RoomOS 11.32.5.1",
"status": "affected"
},
{
"version": "RoomOS 26.4.1.6",
"status": "affected"
},
{
"version": "RoomOS 26.4.1.4",
"status": "affected"
},
{
"version": "RoomOS 26.3.1.3",
"status": "affected"
},
{
"version": "RoomOS 11.36.1.1",
"status": "affected"
},
{
"version": "RoomOS 11.37.1.0",
"status": "affected"
},
{
"version": "RoomOS 26.5.2.0",
"status": "affected"
},
{
"version": "RoomOS 11.38.1.1",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-05T17:35:51.642375Z",
"id": "CVE-2026-20289",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-532"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "26.0.1.2",
"versionEndExcluding": "26.7.2.2",
"matchCriteriaId": "CB65A33B-181B-4796-AA6A-A7D74E268940"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:roomos_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.39.1.3",
"matchCriteriaId": "0EB66C44-01F9-4261-BC17-47B0E96F3768"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:roomos_cloud:*:*:*:*:*:*:*:*",
"versionStartIncluding": "26.0.1.2",
"versionEndExcluding": "26.7.1.12",
"matchCriteriaId": "8877D53C-00D3-4BBA-BD4D-667AF98D3E4C"
}
]
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}