CVE-2026-20158: Cisco RoomOS Security Hardening Release - Resource Lifetime Management Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20158 are related to improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20158?
The severity of CVE-2026-20158 is classified as high with a CVSS score of 7.5.
What vulnerabilities are associated with CVE-2026-20158?
CVE-2026-20158 addresses resource lifetime management vulnerabilities discovered in Cisco RoomOS.
How do I fix CVE-2026-20158?
To fix CVE-2026-20158, users should apply the software hardening release provided by Cisco for RoomOS.
What type of access does CVE-2026-20158 affect?
CVE-2026-20158 affects network access and requires no privileges or user interaction to exploit.
When was CVE-2026-20158 published?
CVE-2026-20158 was published on July 15, 2026.