CVE-2026-20289— Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
Affected Version Matrix 68
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco RoomOS Software | RoomOS 10.11.2.2 | affected |
RoomOS 10.15.2.2 | affected | ||
RoomOS 11.5.4.6 | affected | ||
RoomOS 11.5.2.4 | affected | ||
RoomOS 10.8.2.5 | affected | ||
RoomOS 10.11.5.2 | affected | ||
RoomOS 10.11.3.0 | affected | ||
RoomOS 10.15.5.3 | affected | ||
| … +60 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-20289
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco RoomOS Software | RoomOS 10.11.2.2 | - |
II. Public POCs for CVE-2026-20289
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20289
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20289 (1)
Same Patch Batch · Cisco · 2026-08-05 · 23 CVEs total
| CVE-2026-20303 | 9.9 CRITICAL | Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities |
| CVE-2026-20304 | 9.9 CRITICAL | Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities |
| CVE-2026-20272 | 9.8 CRITICAL | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20310 | 9.1 CRITICAL | Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Ac |
| CVE-2026-20267 | 9.0 CRITICAL | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20200 | 8.8 HIGH | Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulner |
| CVE-2026-20312 | 8.8 HIGH | Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities |
| CVE-2026-20263 | 8.6 HIGH | Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability |
| CVE-2026-20268 | 8.6 HIGH | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20269 | 8.6 HIGH | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20270 | 8.6 HIGH | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20271 | 8.6 HIGH | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20273 | 8.6 HIGH | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20301 | 8.6 HIGH | Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Serv |
| CVE-2026-20124 | 7.7 HIGH | Cisco IOS XE Software SNMP Denial of Service Vulnerability |
| CVE-2026-20313 | 7.7 HIGH | Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities |
| CVE-2026-20288 | 6.5 MEDIUM | Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability |
| CVE-2026-20294 | 6.5 MEDIUM | Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability |
| CVE-2026-20311 | 6.3 MEDIUM | Cisco IOS XE Software Web UI Denial of Service Vulnerability |
| CVE-2026-20028 | 5.0 MEDIUM | Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco RoomOS Software
- CVE-2026-20187
Cisco RoomOS Security Hardening Release - Exceptional Condit - CVE-2026-20158
Cisco RoomOS Security Hardening Release - Resource Lifetime - CVE-2026-20153
Cisco RoomOS Security Hardening Release - Input Validation V - CVE-2026-20157
Cisco RoomOS Security Hardening Release - Missing Encryption - CVE-2026-20156
Cisco RoomOS Security Hardening Release - Buffer Management
Same vendor: Cisco
- CVE-2026-20313
Cisco Catalyst SD-WAN Security Hardening Release - Memory Co - CVE-2026-20311
Cisco IOS XE Software Web UI Denial of Service Vulnerability - CVE-2026-20312
Cisco Catalyst SD-WAN Security Hardening Release - Informati - CVE-2026-20310
Cisco SD-WAN Software Security Hardening Release - Improper - CVE-2026-20303
Cisco Catalyst SD-WAN Security Hardening Release - Input Val
Same weakness: CWE-532
- CVE-2026-0637
Sensitive Information Disclosure via Event Publisher Logging - CVE-2026-12947
IBM App Connect Enterprise is vulnerable to Confidentiality - CVE-2026-44105
Cleartext password in logs - CVE-2026-14528
IBM WebSphere Application Server is affected by an unsafe de - CVE-2026-1918
IBM Sterling B2B Integrator and IBM Sterling File Gateway st
V. Comments for CVE-2026-20289
No comments yet