CVE-2026-20158
CVE-2026-20158: 2 tracked advisory records across Cisco. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
2 advisories- Advisory severityHigh8.8
High [CVE-2026-20150 +5] Cisco RoomOS Security Hardening Release: July 2026
cisco-sa-hardening-roomos-AqNMbEqSource published Source updated
This bulletin covers 6 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. Affected product named by the advisory: RoomOS Software.
- Affected products in this advisory
- RoomOS Software
- Source-reported affected versions
- Scope: These vulnerabilities affect Cisco RoomOS, regardless of device configuration.
- Release 11 and earlier (first fixed: 11.32.6.0 / RoomOS 11.39.1.1)
- Release 26 (first fixed: 26.5.2.2 / RoomOS June 2026 (26.7.1.7))
- Source-reported fixed versions
- 11.32.6.0 / RoomOS 11.39.1.1
- 26.5.2.2 / RoomOS June 2026 (26.7.1.7)
- Mitigation guidance
- Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
- Release 11 and earlier: upgrade to 11.32.6.0 / RoomOS 11.39.1.1.
- Release 26: upgrade to 26.5.2.2 / RoomOS June 2026 (26.7.1.7).
- Workarounds
- There are no workarounds that address these vulnerabilities.
- Advisory severityHigh
High [CVE-2026-20146 +6] Cisco Advance Notification for Publication of July 15, 2026, Security Advisories
cisco-sa-notice-ILh3ZrP5Source published Source updated
This bulletin covers 7 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
On July 15, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco RoomOS Security Hardening Release: July 2026 CVE-2026-20150 CVE-2026-20153 CVE-2026-20156 CVE-2026-20157 CVE-2026-20158 CVE-2026-20187 High 8.8 Cisco Identity Services Engine Path Traversal Vulnerability CVE-2026-20146 Medium 5.5 To fully remediate the vulnerabilities that were disclosed on July 15, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more information about changes in Cisco PSIRT vulnerability disclosure, see…
- Affected products in this advisory
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- On July 15, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) RoomOS To fully remediate vulnerabilities to be disclosed on July 15, 2026, Cisco strongly recommends that customers upgrade to the fixed software indicated in the advisories.
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.