CVE-2026-20289

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.

CVSS v3 5.7 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cisco:roomos::::::::
	cpe:2.3:o:cisco:roomos_cloud::::::::
	cpe:2.3:o:cisco:roomos_cloud::::::::

History

No history.

Information

Published : 2026-08-05 17:16

Updated : 2026-08-17 12:49

NVD link : CVE-2026-20289

Mitre link : CVE-2026-20289

CVE.ORG link : CVE-2026-20289

JSON object : View

Products Affected

cisco

roomos_cloud
roomos

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2026-20289", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20289", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T17:35:51.642375Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.1}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco RoomOS Software", "versions": [{"status": "affected", "version": "RoomOS 10.11.2.2"}, {"status": "affected", "version": "RoomOS 10.15.2.2"}, {"status": "affected", "version": "RoomOS 11.5.4.6"}, {"status": "affected", "version": "RoomOS 11.5.2.4"}, {"status": "affected", "version": "RoomOS 10.8.2.5"}, {"status": "affected", "version": "RoomOS 10.11.5.2"}, {"status": "affected", "version": "RoomOS 10.11.3.0"}, {"status": "affected", "version": "RoomOS 10.15.5.3"}, {"status": "affected", "version": "RoomOS 10.19.2.2"}, {"status": "affected", "version": "RoomOS 11.1.3.1"}, {"status": "affected", "version": "RoomOS 10.11.6.0"}, {"status": "affected", "version": "RoomOS 10.19.3.0"}, {"status": "affected", "version": "RoomOS 10.19.4.2"}, {"status": "affected", "version": "RoomOS 10.3.2.4"}, {"status": "affected", "version": "RoomOS 10.3.4.0"}, {"status": "affected", "version": "RoomOS 10.15.3.0"}, {"status": "affected", "version": "RoomOS 11.1.4.1"}, {"status": "affected", "version": "RoomOS 11.14.2.3"}, {"status": "affected", "version": "RoomOS 11.1.2.4"}, {"status": "affected", "version": "RoomOS 10.8.3.1"}, {"status": "affected", "version": "RoomOS 11.14.2.1"}, {"status": "affected", "version": "RoomOS 10.3.3.0"}, {"status": "affected", "version": "RoomOS 10.8.4.0"}, {"status": "affected", "version": "RoomOS 10.15.4.1"}, {"status": "affected", "version": "RoomOS 10.19.5.6"}, {"status": "affected", "version": "RoomOS 10.11.4.1"}, {"status": "affected", "version": "RoomOS 11.9.3.1"}, {"status": "affected", "version": "RoomOS 11.5.3.3"}, {"status": "affected", "version": "RoomOS 10.3.2.0"}, {"status": "affected", "version": "RoomOS 11.9.2.4"}, {"status": "affected", "version": "RoomOS 11.14.3.0"}, {"status": "affected", "version": "RoomOS 11.17.2.2"}, {"status": "affected", "version": "RoomOS 11.14.4.0"}, {"status": "affected", "version": "RoomOS 10.19 StepUpg"}, {"status": "affected", "version": "RoomOS 11.17.3.0"}, {"status": "affected", "version": "RoomOS 11.20.2.3"}, {"status": "affected", "version": "RoomOS 11.14.5.0"}, {"status": "affected", "version": "RoomOS 11.17.4.0"}, {"status": "affected", "version": "RoomOS 11.20.3.0"}, {"status": "affected", "version": "RoomOS 11.23.1.6"}, {"status": "affected", "version": "RoomOS 11.23.1.8"}, {"status": "affected", "version": "RoomOS 11.24.1.5"}, {"status": "affected", "version": "RoomOS 11.24.2.4"}, {"status": "affected", "version": "RoomOS 11.24.3.0"}, {"status": "affected", "version": "RoomOS 11.24.4.1"}, {"status": "affected", "version": "RoomOS 11.27.2.0"}, {"status": "affected", "version": "RoomOS 11.28.1.3"}, {"status": "affected", "version": "RoomOS 11.27.3.0"}, {"status": "affected", "version": "RoomOS 11.31.1.5"}, {"status": "affected", "version": "RoomOS 11.27.4.0"}, {"status": "affected", "version": "RoomOS 11.32.2.1"}, {"status": "affected", "version": "RoomOS 11.33.1.7"}, {"status": "affected", "version": "RoomOS 26.0.1.2"}, {"status": "affected", "version": "RoomOS 11.34.1.2"}, {"status": "affected", "version": "RoomOS 11.32.3.0"}, {"status": "affected", "version": "RoomOS 11.27.5.0"}, {"status": "affected", "version": "RoomOS 11.32.4.0"}, {"status": "affected", "version": "RoomOS 26.1.1.5"}, {"status": "affected", "version": "RoomOS 11.35.1.2"}, {"status": "affected", "version": "RoomOS 26.2.2.2"}, {"status": "affected", "version": "RoomOS 11.32.5.1"}, {"status": "affected", "version": "RoomOS 26.4.1.6"}, {"status": "affected", "version": "RoomOS 26.4.1.4"}, {"status": "affected", "version": "RoomOS 26.3.1.3"}, {"status": "affected", "version": "RoomOS 11.36.1.1"}, {"status": "affected", "version": "RoomOS 11.37.1.0"}, {"status": "affected", "version": "RoomOS 26.5.2.0"}, {"status": "affected", "version": "RoomOS 11.38.1.1"}], "defaultStatus": "unknown"}]}], "published": "2026-08-05T17:16:49.733", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information.\r\n\r\nThis vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials."}], "lastModified": "2026-08-17T12:49:55.497", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB65A33B-181B-4796-AA6A-A7D74E268940", "versionEndExcluding": "26.7.2.2", "versionStartIncluding": "26.0.1.2"}, {"criteria": "cpe:2.3:o:cisco:roomos_cloud:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EB66C44-01F9-4261-BC17-47B0E96F3768", "versionEndExcluding": "11.39.1.3"}, {"criteria": "cpe:2.3:o:cisco:roomos_cloud:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8877D53C-00D3-4BBA-BD4D-667AF98D3E4C", "versionEndExcluding": "26.7.1.12", "versionStartIncluding": "26.0.1.2"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}