Is CVE-2026-20157 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-20157 being exploited in the wild.

How severe is CVE-2026-20157?

High severity, with a CVSS score of 7.5, published 15 July 2026.

Which products and versions are affected?

Cisco RoomOS RoomOS 11 and earlier; RoomOS 26 before 26.5.2.2.

Is there a fix for CVE-2026-20157?

A patch was published on 2026-07-15. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-20157 attacked?

It is attacked from the adjacent network, in an operating system.

Am I affected by CVE-2026-20157?

Check whether you run Cisco RoomOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-20157: Cisco RoomOS missing encryption for sensitive data

CVE-2026-20157 · Severity: high · CVSS 7.5 · Published 2026-07-15

Cisco RoomOS, the operating system for Cisco collaboration and video conferencing devices, is affected by a security flaw where sensitive data is transmitted without encryption. An attacker with access to the local network could potentially intercept and read this information, leading to a loss of confidentiality. Cisco has released software updates to address this issue as part of a broader security hardening effort.

Technologies: Cisco RoomOS. Vendors: Cisco.

Quick answers

Is CVE-2026-20157 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-20157 being exploited in the wild.
How severe is CVE-2026-20157?: High severity, with a CVSS score of 7.5, published 15 July 2026.
Which products and versions are affected?: Cisco RoomOS RoomOS 11 and earlier; RoomOS 26 before 26.5.2.2.
Is there a fix for CVE-2026-20157?: A patch was published on 2026-07-15. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-20157 attacked?: It is attacked from the adjacent network, in an operating system.
Am I affected by CVE-2026-20157?: Check whether you run Cisco RoomOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability belongs to the CWE-311 pillar (Missing Encryption of Sensitive Data) and was identified during Cisco's internal security testing of RoomOS. The flaw allows for the cleartext transmission of sensitive information, which could be intercepted by an unauthenticated attacker on the same adjacent network. The CVSS score of 7.5 reflects a high impact on confidentiality, integrity, and availability, though the attack complexity is rated as high. Cisco has consolidated multiple underlying issues of this class under a single CVE for this hardening release. Fixes are available in RoomOS versions 11.32.6.0, 11.39.1.1 (Cloud), 26.5.2.2, and June 2026 (Cloud) or later.

Affected products

Cisco RoomOS Software RoomOS 11 and earlier; RoomOS 26 before 26.5.2.2

Timeline

2026-07-15: advisory: Initial public release by Cisco
2026-07-15: patched

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.