Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities
Published Jul 15, 2026
8.8
HIGHCVSS 3.1
EPSS 0.42%
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20150 are related to improper access control that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Affected products
-
Affected
- RoomOS 10.11.2.2
- RoomOS 10.11.3.0
- RoomOS 10.11.4.1
- RoomOS 10.11.5.2
- RoomOS 10.11.6.0
- RoomOS 10.15.2.2
- RoomOS 10.15.3.0
- RoomOS 10.15.4.1
- RoomOS 10.15.5.3
- RoomOS 10.19 StepUpg
- RoomOS 10.19.2.2
- RoomOS 10.19.3.0
- RoomOS 10.19.4.2
- RoomOS 10.19.5.6
- RoomOS 10.3.2.0
- RoomOS 10.3.2.4
- RoomOS 10.3.3.0
- RoomOS 10.3.4.0
- RoomOS 10.8.2.5
- RoomOS 10.8.3.1
- RoomOS 10.8.4.0
- RoomOS 11.1.2.4
- RoomOS 11.1.3.1
- RoomOS 11.1.4.1
- RoomOS 11.14.2.1
- RoomOS 11.14.2.3
- RoomOS 11.14.3.0
- RoomOS 11.14.4.0
- RoomOS 11.14.5.0
- RoomOS 11.17.2.2
- RoomOS 11.17.3.0
- RoomOS 11.17.4.0
- RoomOS 11.20.2.3
- RoomOS 11.20.3.0
- RoomOS 11.23.1.6
- RoomOS 11.23.1.8
- RoomOS 11.24.1.5
- RoomOS 11.24.2.4
- RoomOS 11.24.3.0
- RoomOS 11.24.4.1
- RoomOS 11.27.2.0
- RoomOS 11.27.3.0
- RoomOS 11.27.4.0
- RoomOS 11.27.5.0
- RoomOS 11.28.1.3
- RoomOS 11.31.1.5
- RoomOS 11.32.2.1
- RoomOS 11.32.3.0
- RoomOS 11.32.4.0
- RoomOS 11.32.5.1
- RoomOS 11.33.1.7
- RoomOS 11.34.1.2
- RoomOS 11.35.1.2
- RoomOS 11.36.1.1
- RoomOS 11.37.1.0
- RoomOS 11.38.1.1
- RoomOS 11.5.2.4
- RoomOS 11.5.3.3
- RoomOS 11.5.4.6
- RoomOS 11.9.2.4
- RoomOS 11.9.3.1
- RoomOS 26.0.1.2
- RoomOS 26.1.1.5
- RoomOS 26.2.2.2
- RoomOS 26.3.1.3
- RoomOS 26.4.1.4
- RoomOS 26.4.1.6
- RoomOS 26.5.2.0
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Cisco | Cisco RoomOS Software | unknown | Affected
|
- < 11.32.6.0
- ≥ 26.0.1.2 · < 26.5.2.2
- < 11.39.1.1
- ≥ 26.0.1.2 · < 26.7.1.7
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44715 Advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq Vendor Advisory
- https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data