SB2026080637 - Information disclosure in Cisco RoomOS
Published: August 6, 2026
Security Bulletin ID
SB2026080637
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Inclusion of Sensitive Information in Log Files (CVE-ID: CVE-2026-20289)
CWE-ID: CWE-532 - Information Exposure Through Log Files
CVSSv4: 6.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to insertion of sensitive information into log files in the logging subsystem when extended logging is enabled and system logs are collected. A remote user can enable a specific logging level and collect the system logs to disclose sensitive information.
User interaction is required.
Remediation
Install update from vendor's website.