Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging level and then collecting the system logs. A successful exploit could allow the attacker to view sensitive information like user login credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm Security Impact Rating: Medium CVE: CVE-2026-20289
CSIRTS triage
- What
- The logging subsystem logs sensitive information including user login credentials at specific logging levels.
- Who is affected
- Authenticated local attackers with low privileges on Cisco RoomOS systems.
- Urgency
- Medium severity; requires local authentication and log access but exposes credentials.
- Action
- Apply Cisco RoomOS software updates; no workarounds available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch RoomOS
Get an email when a new RoomOS advisory drops — max one per day, one-click unsubscribe.
Details
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-202890.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20289 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
Recent advisories for Cisco RoomOS Logging
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
More from Cisco Security Advisories
- criticalCisco IOS XR Software Security Hardening Release: September 20262026-09-08
- highCisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability2026-09-08
- mediumCisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities2026-09-08
- criticalCisco Advance Notification for Publication of September 2, 2026, Security Advisories2026-09-02
- criticalCisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability2026-09-02