CVE-2026-20289

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.

CVSS v3 5.7 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cisco:roomos::::::::
	cpe:2.3:o:cisco:roomos_cloud::::::::
	cpe:2.3:o:cisco:roomos_cloud::::::::

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad en el subsistema de registro de Cisco RoomOS podría permitir a un atacante local y autenticado con privilegios bajos acceder a información sensible. Esta vulnerabilidad se debe al registro de información sensible. Un atacante podría explotar esta vulnerabilidad al habilitar un nivel de registro específico y luego recopilar los registros del sistema. Un exploit exitoso podría permitir al atacante ver información sensible como credenciales de inicio de sesión de usuario.

Information

Published : 2026-08-05 17:16

Updated : 2026-10-23 21:10

NVD link : CVE-2026-20289

Mitre link : CVE-2026-20289

CVE.ORG link : CVE-2026-20289

JSON object : View

Products Affected

cisco

roomos_cloud
roomos

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2026-20289", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20289", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T17:35:51.642375Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.1}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco RoomOS Software", "versions": [{"status": "affected", "version": "RoomOS 10.11.2.2"}, {"status": "affected", "version": "RoomOS 10.15.2.2"}, {"status": "affected", "version": "RoomOS 11.5.4.6"}, {"status": "affected", "version": "RoomOS 11.5.2.4"}, {"status": "affected", "version": "RoomOS 10.8.2.5"}, {"status": "affected", "version": "RoomOS 10.11.5.2"}, {"status": "affected", "version": "RoomOS 10.11.3.0"}, {"status": "affected", "version": "RoomOS 10.15.5.3"}, {"status": "affected", "version": "RoomOS 10.19.2.2"}, {"status": "affected", "version": "RoomOS 11.1.3.1"}, {"status": "affected", "version": "RoomOS 10.11.6.0"}, {"status": "affected", "version": "RoomOS 10.19.3.0"}, {"status": "affected", "version": "RoomOS 10.19.4.2"}, {"status": "affected", "version": "RoomOS 10.3.2.4"}, {"status": "affected", "version": "RoomOS 10.3.4.0"}, {"status": "affected", "version": "RoomOS 10.15.3.0"}, {"status": "affected", "version": "RoomOS 11.1.4.1"}, {"status": "affected", "version": "RoomOS 11.14.2.3"}, {"status": "affected", "version": "RoomOS 11.1.2.4"}, {"status": "affected", "version": "RoomOS 10.8.3.1"}, {"status": "affected", "version": "RoomOS 11.14.2.1"}, {"status": "affected", "version": "RoomOS 10.3.3.0"}, {"status": "affected", "version": "RoomOS 10.8.4.0"}, {"status": "affected", "version": "RoomOS 10.15.4.1"}, {"status": "affected", "version": "RoomOS 10.19.5.6"}, {"status": "affected", "version": "RoomOS 10.11.4.1"}, {"status": "affected", "version": "RoomOS 11.9.3.1"}, {"status": "affected", "version": "RoomOS 11.5.3.3"}, {"status": "affected", "version": "RoomOS 10.3.2.0"}, {"status": "affected", "version": "RoomOS 11.9.2.4"}, {"status": "affected", "version": "RoomOS 11.14.3.0"}, {"status": "affected", "version": "RoomOS 11.17.2.2"}, {"status": "affected", "version": "RoomOS 11.14.4.0"}, {"status": "affected", "version": "RoomOS 10.19 StepUpg"}, {"status": "affected", "version": "RoomOS 11.17.3.0"}, {"status": "affected", "version": "RoomOS 11.20.2.3"}, {"status": "affected", "version": "RoomOS 11.14.5.0"}, {"status": "affected", "version": "RoomOS 11.17.4.0"}, {"status": "affected", "version": "RoomOS 11.20.3.0"}, {"status": "affected", "version": "RoomOS 11.23.1.6"}, {"status": "affected", "version": "RoomOS 11.23.1.8"}, {"status": "affected", "version": "RoomOS 11.24.1.5"}, {"status": "affected", "version": "RoomOS 11.24.2.4"}, {"status": "affected", "version": "RoomOS 11.24.3.0"}, {"status": "affected", "version": "RoomOS 11.24.4.1"}, {"status": "affected", "version": "RoomOS 11.27.2.0"}, {"status": "affected", "version": "RoomOS 11.28.1.3"}, {"status": "affected", "version": "RoomOS 11.27.3.0"}, {"status": "affected", "version": "RoomOS 11.31.1.5"}, {"status": "affected", "version": "RoomOS 11.27.4.0"}, {"status": "affected", "version": "RoomOS 11.32.2.1"}, {"status": "affected", "version": "RoomOS 11.33.1.7"}, {"status": "affected", "version": "RoomOS 26.0.1.2"}, {"status": "affected", "version": "RoomOS 11.34.1.2"}, {"status": "affected", "version": "RoomOS 11.32.3.0"}, {"status": "affected", "version": "RoomOS 11.27.5.0"}, {"status": "affected", "version": "RoomOS 11.32.4.0"}, {"status": "affected", "version": "RoomOS 26.1.1.5"}, {"status": "affected", "version": "RoomOS 11.35.1.2"}, {"status": "affected", "version": "RoomOS 26.2.2.2"}, {"status": "affected", "version": "RoomOS 11.32.5.1"}, {"status": "affected", "version": "RoomOS 26.4.1.6"}, {"status": "affected", "version": "RoomOS 26.4.1.4"}, {"status": "affected", "version": "RoomOS 26.3.1.3"}, {"status": "affected", "version": "RoomOS 11.36.1.1"}, {"status": "affected", "version": "RoomOS 11.37.1.0"}, {"status": "affected", "version": "RoomOS 26.5.2.0"}, {"status": "affected", "version": "RoomOS 11.38.1.1"}], "defaultStatus": "unknown"}]}], "published": "2026-08-05T17:16:49.733", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information.\r\n\r\nThis vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials."}, {"lang": "es", "value": "Una vulnerabilidad en el subsistema de registro de Cisco RoomOS podr\u00eda permitir a un atacante local y autenticado con privilegios bajos acceder a informaci\u00f3n sensible.\n\nEsta vulnerabilidad se debe al registro de informaci\u00f3n sensible. Un atacante podr\u00eda explotar esta vulnerabilidad al habilitar un nivel de registro espec\u00edfico y luego recopilar los registros del sistema. Un exploit exitoso podr\u00eda permitir al atacante ver informaci\u00f3n sensible como credenciales de inicio de sesi\u00f3n de usuario."}], "lastModified": "2026-10-23T21:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB65A33B-181B-4796-AA6A-A7D74E268940", "versionEndExcluding": "26.7.2.2", "versionStartIncluding": "26.0.1.2"}, {"criteria": "cpe:2.3:o:cisco:roomos_cloud:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EB66C44-01F9-4261-BC17-47B0E96F3768", "versionEndExcluding": "11.39.1.3"}, {"criteria": "cpe:2.3:o:cisco:roomos_cloud:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8877D53C-00D3-4BBA-BD4D-667AF98D3E4C", "versionEndExcluding": "26.7.1.12", "versionStartIncluding": "26.0.1.2"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}