CVE-2026-20158

Cisco RoomOS Security Hardening Release - Resource Lifetime Management Vulnerabilities

Published Jul 15, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20158 are related to improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

Analysis

Technical impact

Improper control of a resource throughout its lifetime can allow an attacker to interfere with resource allocation, use, or deallocation, which may cause exhaustion of system resources or grant unauthorized access. The weakness is classified under CWE‑664.

Affected Systems

Cisco RoomOS software is affected. No specific product versions are listed by the CNA; therefore, all installations of Cisco RoomOS that have not yet received the hardening release remain at risk.

Risk and Exploitability

The CVSS score of 7.5 indicates high severity; the EPSS score is less than 1%, suggesting a low likelihood of exploitation in the wild at this time. This vulnerability is not listed in CISA KEV, implying no known widespread exploitation. Based on the description, it is inferred that the attack vector could involve local or privileged access, though the exact path of exploitation is not disclosed.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco RoomOS Software

unknown

Version	Status	Constraints
`RoomOS 10.11.2.2`	affected	—
`RoomOS 10.15.2.2`	affected	—
`RoomOS 11.5.4.6`	affected	—
`RoomOS 11.5.2.4`	affected	—
`RoomOS 10.8.2.5`	affected	—
`RoomOS 10.11.5.2`	affected	—
`RoomOS 10.11.3.0`	affected	—
`RoomOS 10.15.5.3`	affected	—
`RoomOS 10.19.2.2`	affected	—
`RoomOS 11.1.3.1`	affected	—
`RoomOS 10.11.6.0`	affected	—
`RoomOS 10.19.3.0`	affected	—
`RoomOS 10.19.4.2`	affected	—
`RoomOS 10.3.2.4`	affected	—
`RoomOS 10.3.4.0`	affected	—
`RoomOS 10.15.3.0`	affected	—
`RoomOS 11.1.4.1`	affected	—
`RoomOS 11.14.2.3`	affected	—
`RoomOS 11.1.2.4`	affected	—
`RoomOS 10.8.3.1`	affected	—
`RoomOS 11.14.2.1`	affected	—
`RoomOS 10.3.3.0`	affected	—
`RoomOS 10.8.4.0`	affected	—
`RoomOS 10.15.4.1`	affected	—
`RoomOS 10.19.5.6`	affected	—
`RoomOS 10.11.4.1`	affected	—
`RoomOS 11.9.3.1`	affected	—
`RoomOS 11.5.3.3`	affected	—
`RoomOS 10.3.2.0`	affected	—
`RoomOS 11.9.2.4`	affected	—
`RoomOS 11.14.3.0`	affected	—
`RoomOS 11.17.2.2`	affected	—
`RoomOS 11.14.4.0`	affected	—
`RoomOS 10.19 StepUpg`	affected	—
`RoomOS 11.17.3.0`	affected	—
`RoomOS 11.20.2.3`	affected	—
`RoomOS 11.14.5.0`	affected	—
`RoomOS 11.17.4.0`	affected	—
`RoomOS 11.20.3.0`	affected	—
`RoomOS 11.23.1.6`	affected	—
`RoomOS 11.23.1.8`	affected	—
`RoomOS 11.24.1.5`	affected	—
`RoomOS 11.24.2.4`	affected	—
`RoomOS 11.24.3.0`	affected	—
`RoomOS 11.24.4.1`	affected	—
`RoomOS 11.27.2.0`	affected	—
`RoomOS 11.28.1.3`	affected	—
`RoomOS 11.27.3.0`	affected	—
`RoomOS 11.31.1.5`	affected	—
`RoomOS 11.27.4.0`	affected	—
`RoomOS 11.32.2.1`	affected	—
`RoomOS 11.33.1.7`	affected	—
`RoomOS 26.0.1.2`	affected	—
`RoomOS 11.34.1.2`	affected	—
`RoomOS 11.32.3.0`	affected	—
`RoomOS 11.27.5.0`	affected	—
`RoomOS 11.32.4.0`	affected	—
`RoomOS 26.1.1.5`	affected	—
`RoomOS 11.35.1.2`	affected	—
`RoomOS 26.2.2.2`	affected	—
`RoomOS 11.32.5.1`	affected	—
`RoomOS 26.4.1.6`	affected	—
`RoomOS 26.4.1.4`	affected	—
`RoomOS 26.3.1.3`	affected	—
`RoomOS 11.36.1.1`	affected	—
`RoomOS 11.37.1.0`	affected	—
`RoomOS 26.5.2.0`	affected	—
`RoomOS 11.38.1.1`	affected	—

Configuration 1 [-]

OR	cpe:2.3:o:cisco:roomos::::::::
	cpe:2.3:o:cisco:roomos::::::::
	cpe:2.3:o:cisco:roomos_cloud::::::::
	cpe:2.3:o:cisco:roomos_cloud::::::::

No data.

Vendor Product Versions

Cisco

Roomos Software

Version	Status	Scheme	Platform
`RoomOS 10.11.2.2`	affected	generic	—
`RoomOS 10.15.2.2`	affected	generic	—
`RoomOS 11.5.4.6`	affected	generic	—
`RoomOS 11.5.2.4`	affected	generic	—
`RoomOS 10.8.2.5`	affected	generic	—
`RoomOS 10.11.5.2`	affected	generic	—
`RoomOS 10.11.3.0`	affected	generic	—
`RoomOS 10.15.5.3`	affected	generic	—
`RoomOS 10.19.2.2`	affected	generic	—
`RoomOS 11.1.3.1`	affected	generic	—
`RoomOS 10.11.6.0`	affected	generic	—
`RoomOS 10.19.3.0`	affected	generic	—
`RoomOS 10.19.4.2`	affected	generic	—
`RoomOS 10.3.2.4`	affected	generic	—
`RoomOS 10.3.4.0`	affected	generic	—
`RoomOS 10.15.3.0`	affected	generic	—
`RoomOS 11.1.4.1`	affected	generic	—
`RoomOS 11.14.2.3`	affected	generic	—
`RoomOS 11.1.2.4`	affected	generic	—
`RoomOS 10.8.3.1`	affected	generic	—
`RoomOS 11.14.2.1`	affected	generic	—
`RoomOS 10.3.3.0`	affected	generic	—
`RoomOS 10.8.4.0`	affected	generic	—
`RoomOS 10.15.4.1`	affected	generic	—
`RoomOS 10.19.5.6`	affected	generic	—
`RoomOS 10.11.4.1`	affected	generic	—
`RoomOS 11.9.3.1`	affected	generic	—
`RoomOS 11.5.3.3`	affected	generic	—
`RoomOS 10.3.2.0`	affected	generic	—
`RoomOS 11.9.2.4`	affected	generic	—
`RoomOS 11.14.3.0`	affected	generic	—
`RoomOS 11.17.2.2`	affected	generic	—
`RoomOS 11.14.4.0`	affected	generic	—
`RoomOS 10.19 StepUpg`	affected	generic	—
`RoomOS 11.17.3.0`	affected	generic	—
`RoomOS 11.20.2.3`	affected	generic	—
`RoomOS 11.14.5.0`	affected	generic	—
`RoomOS 11.17.4.0`	affected	generic	—
`RoomOS 11.20.3.0`	affected	generic	—
`RoomOS 11.23.1.6`	affected	generic	—
`RoomOS 11.23.1.8`	affected	generic	—
`RoomOS 11.24.1.5`	affected	generic	—
`RoomOS 11.24.2.4`	affected	generic	—
`RoomOS 11.24.3.0`	affected	generic	—
`RoomOS 11.24.4.1`	affected	generic	—
`RoomOS 11.27.2.0`	affected	generic	—
`RoomOS 11.28.1.3`	affected	generic	—
`RoomOS 11.27.3.0`	affected	generic	—
`RoomOS 11.31.1.5`	affected	generic	—
`RoomOS 11.27.4.0`	affected	generic	—
`RoomOS 11.32.2.1`	affected	generic	—
`RoomOS 11.33.1.7`	affected	generic	—
`RoomOS 26.0.1.2`	affected	generic	—
`RoomOS 11.34.1.2`	affected	generic	—
`RoomOS 11.32.3.0`	affected	generic	—
`RoomOS 11.27.5.0`	affected	generic	—
`RoomOS 11.32.4.0`	affected	generic	—
`RoomOS 26.1.1.5`	affected	generic	—
`RoomOS 11.35.1.2`	affected	generic	—
`RoomOS 26.2.2.2`	affected	generic	—
`RoomOS 11.32.5.1`	affected	generic	—
`RoomOS 26.4.1.6`	affected	generic	—
`RoomOS 26.4.1.4`	affected	generic	—
`RoomOS 26.3.1.3`	affected	generic	—
`RoomOS 11.36.1.1`	affected	generic	—
`RoomOS 11.37.1.0`	affected	generic	—
`RoomOS 26.5.2.0`	affected	generic	—
`RoomOS 11.38.1.1`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update Cisco RoomOS to the latest security hardening release that contains the fix for this vulnerability.
Disable or restrict any functions that expose unnecessary resource lifetimes or are no longer required.
Monitor system logs for abnormal resource allocation or deallocation events to detect potential abuse or misconfiguration.

Generated by OpenCVE AI on August 3, 2026 at 03:02 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.467% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

History

Aug 14, 2026 9:30 PM Added references View changes

Type	Values Removed	Values Added
References		https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

Jul 28, 2026 9:00 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco roomos Software
Vendors & Products		Cisco Cisco roomos Software

Jul 15, 2026 7:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jul 15, 2026 4:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20158 are related to improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
Title		Cisco RoomOS Security Hardening Release - Resource Lifetime Management Vulnerabilities
Weaknesses		CWE-664
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`