CVE-2026-20289 MEDIUM

CVE-2026-20289: Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability

Vendor Cisco
Product Cisco RoomOS Software
Weakness CWE-532 · Sensitive info in logs
Published August 5, 2026
Last update August 5, 2026

CVSS base score

5.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.

Key dates

02Disclosure timeline

August 5, 2026 CVE published
August 5, 2026 Record updated

Related vulnerabilities

04Related CVE