Cisco Roomos vulnerabilities

33 CVEs affecting Cisco Roomos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20289, published 2026-08-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3336, published 2020-06-18. High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem…
CVE-2019-15288, published 2019-11-26. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate…
CVE-2021-1532, published 2021-05-06. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary…
CVE-2022-20783, published 2022-04-21. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a…
CVE-2019-15289, published 2020-09-23. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2022-20764, published 2022-05-04. High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS)…
CVE-2022-20794, published 2022-05-04. Medium severity, CVSS 4.7. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS)…
CVE-2020-26068, published 2020-11-18. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The…
CVE-2022-20811, published 2022-10-26. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write…
CVE-2022-20776, published 2022-10-26. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write…

Latest

CVE-2026-20289, published 2026-08-05. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging…
CVE-2026-20187, published 2026-07-15. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a…
CVE-2026-20158, published 2026-07-15. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a…
CVE-2026-20157, published 2026-07-15. Critical severity, CVSS 9.8. EPSS: 0.2% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a…
CVE-2026-20156, published 2026-07-15. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a…
CVE-2026-20153, published 2026-07-15. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a…
CVE-2026-20150, published 2026-07-15. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a…
CVE-2025-20329, published 2025-10-15. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in…
CVE-2023-20094, published 2024-11-15. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. This vulnerability exists because the…
CVE-2023-20093, published 2024-11-15. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These…