CVE-2026-20119

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20119", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.377Z", "datePublished": "2026-02-04T16:12:04.796Z", "dateUpdated": "2026-02-12T18:49:48.060Z"}, "containers": {"cna": {"title": "Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of input received by an affected device. An attacker could exploit this vulnerability by getting the affected device to render crafted text, for example, a crafted meeting invitation. As indicated in the CVSS score, no user interaction is required, such as accepting the meeting invitation. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tce-roomos-dos-9V9jrC2q", "name": "cisco-sa-tce-roomos-dos-9V9jrC2q"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-tce-roomos-dos-9V9jrC2q", "discovery": "INTERNAL", "defects": ["CSCws04170"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Validation of Specified Type of Input", "type": "cwe", "cweId": "CWE-1287"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco RoomOS Software", "versions": [{"version": "RoomOS 10.11.2.2", "status": "affected"}, {"version": "RoomOS 10.15.2.2", "status": "affected"}, {"version": "RoomOS 11.5.4.6", "status": "affected"}, {"version": "RoomOS 11.5.2.4", "status": "affected"}, {"version": "RoomOS 10.8.2.5", "status": "affected"}, {"version": "RoomOS 10.11.5.2", "status": "affected"}, {"version": "RoomOS 10.11.3.0", "status": "affected"}, {"version": "RoomOS 10.15.5.3", "status": "affected"}, {"version": "RoomOS 10.19.2.2", "status": "affected"}, {"version": "RoomOS 11.1.3.1", "status": "affected"}, {"version": "RoomOS 10.11.6.0", "status": "affected"}, {"version": "RoomOS 10.19.3.0", "status": "affected"}, {"version": "RoomOS 10.19.4.2", "status": "affected"}, {"version": "RoomOS 10.3.2.4", "status": "affected"}, {"version": "RoomOS 10.3.4.0", "status": "affected"}, {"version": "RoomOS 10.15.3.0", "status": "affected"}, {"version": "RoomOS 11.1.4.1", "status": "affected"}, {"version": "RoomOS 11.14.2.3", "status": "affected"}, {"version": "RoomOS 11.1.2.4", "status": "affected"}, {"version": "RoomOS 10.8.3.1", "status": "affected"}, {"version": "RoomOS 11.14.2.1", "status": "affected"}, {"version": "RoomOS 10.3.3.0", "status": "affected"}, {"version": "RoomOS 10.8.4.0", "status": "affected"}, {"version": "RoomOS 10.15.4.1", "status": "affected"}, {"version": "RoomOS 10.19.5.6", "status": "affected"}, {"version": "RoomOS 10.11.4.1", "status": "affected"}, {"version": "RoomOS 11.9.3.1", "status": "affected"}, {"version": "RoomOS 11.5.3.3", "status": "affected"}, {"version": "RoomOS 10.3.2.0", "status": "affected"}, {"version": "RoomOS 11.9.2.4", "status": "affected"}, {"version": "RoomOS 11.14.3.0", "status": "affected"}, {"version": "RoomOS 11.17.2.2", "status": "affected"}, {"version": "RoomOS 11.14.4.0", "status": "affected"}, {"version": "RoomOS 10.19 StepUpg", "status": "affected"}, {"version": "RoomOS 11.17.3.0", "status": "affected"}, {"version": "RoomOS 11.20.2.3", "status": "affected"}, {"version": "RoomOS 11.14.5.0", "status": "affected"}, {"version": "RoomOS 11.17.4.0", "status": "affected"}, {"version": "RoomOS 11.20.3.0", "status": "affected"}, {"version": "RoomOS 11.23.1.6", "status": "affected"}, {"version": "RoomOS 11.23.1.8", "status": "affected"}, {"version": "RoomOS 11.24.1.5", "status": "affected"}, {"version": "RoomOS 11.24.2.4", "status": "affected"}, {"version": "RoomOS 11.24.3.0", "status": "affected"}, {"version": "RoomOS 11.24.4.1", "status": "affected"}, {"version": "RoomOS 11.27.2.0", "status": "affected"}, {"version": "RoomOS 11.28.1.3", "status": "affected"}, {"version": "RoomOS 11.27.3.0", "status": "affected"}, {"version": "RoomOS 11.31.1.5", "status": "affected"}, {"version": "RoomOS 11.27.4.0", "status": "affected"}, {"version": "RoomOS 11.32.2.1", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco TelePresence Endpoint Software (TC/CE)", "versions": [{"version": "CE9.3.0", "status": "affected"}, {"version": "CE9.10.2", "status": "affected"}, {"version": "CE9.2.6", "status": "affected"}, {"version": "CE9.5.0", "status": "affected"}, {"version": "CE9.3.3", "status": "affected"}, {"version": "CE9.1.4", "status": "affected"}, {"version": "CE9.3.2", "status": "affected"}, {"version": "CE9.4.2", "status": "affected"}, {"version": "CE9.3.1", "status": "affected"}, {"version": "CE9.2.5", "status": "affected"}, {"version": "CE9.9.3", "status": "affected"}, {"version": "CE9.5.3", "status": "affected"}, {"version": "CE9.10.3", "status": "affected"}, {"version": "CE9.1.5", "status": "affected"}, {"version": "CE9.5.2", "status": "affected"}, {"version": "CE9.4.1", "status": "affected"}, {"version": "CE9.6.1", "status": "affected"}, {"version": "CE9.2.4", "status": "affected"}, {"version": "CE9.5.1", "status": "affected"}, {"version": "CE9.10.1", "status": "affected"}, {"version": "CE9.1.2", "status": "affected"}, {"version": "CE9.1.1", "status": "affected"}, {"version": "CE9.9.4", "status": "affected"}, {"version": "CE9.2.1", "status": "affected"}, {"version": "CE9.1.3", "status": "affected"}, {"version": "CE9.0.1", "status": "affected"}, {"version": "CE9.1.6", "status": "affected"}, {"version": "CE9.2.2", "status": "affected"}, {"version": "CE9.4.0", "status": "affected"}, {"version": "CE9.10.0", "status": "affected"}, {"version": "CE9.2.3", "status": "affected"}, {"version": "CE9.12.3", "status": "affected"}, {"version": "CE9.15.18.4", "status": "affected"}, {"version": "CE9.15.3.14", "status": "affected"}, {"version": "CE9.15.18.6", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-02-12T18:49:48.060Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-04T16:41:56.418229Z", "id": "CVE-2026-20119", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-04T16:42:15.817Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20119", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-04T16:41:56.418229Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-04T16:42:11.720Z"}}], "cna": {"title": "Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability", "source": {"defects": ["CSCws04170"], "advisory": "cisco-sa-tce-roomos-dos-9V9jrC2q", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco RoomOS Software", "versions": [{"status": "affected", "version": "RoomOS 10.11.2.2"}, {"status": "affected", "version": "RoomOS 10.15.2.2"}, {"status": "affected", "version": "RoomOS 11.5.4.6"}, {"status": "affected", "version": "RoomOS 11.5.2.4"}, {"status": "affected", "version": "RoomOS 10.8.2.5"}, {"status": "affected", "version": "RoomOS 10.11.5.2"}, {"status": "affected", "version": "RoomOS 10.11.3.0"}, {"status": "affected", "version": "RoomOS 10.15.5.3"}, {"status": "affected", "version": "RoomOS 10.19.2.2"}, {"status": "affected", "version": "RoomOS 11.1.3.1"}, {"status": "affected", "version": "RoomOS 10.11.6.0"}, {"status": "affected", "version": "RoomOS 10.19.3.0"}, {"status": "affected", "version": "RoomOS 10.19.4.2"}, {"status": "affected", "version": "RoomOS 10.3.2.4"}, {"status": "affected", "version": "RoomOS 10.3.4.0"}, {"status": "affected", "version": "RoomOS 10.15.3.0"}, {"status": "affected", "version": "RoomOS 11.1.4.1"}, {"status": "affected", "version": "RoomOS 11.14.2.3"}, {"status": "affected", "version": "RoomOS 11.1.2.4"}, {"status": "affected", "version": "RoomOS 10.8.3.1"}, {"status": "affected", "version": "RoomOS 11.14.2.1"}, {"status": "affected", "version": "RoomOS 10.3.3.0"}, {"status": "affected", "version": "RoomOS 10.8.4.0"}, {"status": "affected", "version": "RoomOS 10.15.4.1"}, {"status": "affected", "version": "RoomOS 10.19.5.6"}, {"status": "affected", "version": "RoomOS 10.11.4.1"}, {"status": "affected", "version": "RoomOS 11.9.3.1"}, {"status": "affected", "version": "RoomOS 11.5.3.3"}, {"status": "affected", "version": "RoomOS 10.3.2.0"}, {"status": "affected", "version": "RoomOS 11.9.2.4"}, {"status": "affected", "version": "RoomOS 11.14.3.0"}, {"status": "affected", "version": "RoomOS 11.17.2.2"}, {"status": "affected", "version": "RoomOS 11.14.4.0"}, {"status": "affected", "version": "RoomOS 10.19 StepUpg"}, {"status": "affected", "version": "RoomOS 11.17.3.0"}, {"status": "affected", "version": "RoomOS 11.20.2.3"}, {"status": "affected", "version": "RoomOS 11.14.5.0"}, {"status": "affected", "version": "RoomOS 11.17.4.0"}, {"status": "affected", "version": "RoomOS 11.20.3.0"}, {"status": "affected", "version": "RoomOS 11.23.1.6"}, {"status": "affected", "version": "RoomOS 11.23.1.8"}, {"status": "affected", "version": "RoomOS 11.24.1.5"}, {"status": "affected", "version": "RoomOS 11.24.2.4"}, {"status": "affected", "version": "RoomOS 11.24.3.0"}, {"status": "affected", "version": "RoomOS 11.24.4.1"}, {"status": "affected", "version": "RoomOS 11.27.2.0"}, {"status": "affected", "version": "RoomOS 11.28.1.3"}, {"status": "affected", "version": "RoomOS 11.27.3.0"}, {"status": "affected", "version": "RoomOS 11.31.1.5"}, {"status": "affected", "version": "RoomOS 11.27.4.0"}, {"status": "affected", "version": "RoomOS 11.32.2.1"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco TelePresence Endpoint Software (TC/CE)", "versions": [{"status": "affected", "version": "CE9.3.0"}, {"status": "affected", "version": "CE9.10.2"}, {"status": "affected", "version": "CE9.2.6"}, {"status": "affected", "version": "CE9.5.0"}, {"status": "affected", "version": "CE9.3.3"}, {"status": "affected", "version": "CE9.1.4"}, {"status": "affected", "version": "CE9.3.2"}, {"status": "affected", "version": "CE9.4.2"}, {"status": "affected", "version": "CE9.3.1"}, {"status": "affected", "version": "CE9.2.5"}, {"status": "affected", "version": "CE9.9.3"}, {"status": "affected", "version": "CE9.5.3"}, {"status": "affected", "version": "CE9.10.3"}, {"status": "affected", "version": "CE9.1.5"}, {"status": "affected", "version": "CE9.5.2"}, {"status": "affected", "version": "CE9.4.1"}, {"status": "affected", "version": "CE9.6.1"}, {"status": "affected", "version": "CE9.2.4"}, {"status": "affected", "version": "CE9.5.1"}, {"status": "affected", "version": "CE9.10.1"}, {"status": "affected", "version": "CE9.1.2"}, {"status": "affected", "version": "CE9.1.1"}, {"status": "affected", "version": "CE9.9.4"}, {"status": "affected", "version": "CE9.2.1"}, {"status": "affected", "version": "CE9.1.3"}, {"status": "affected", "version": "CE9.0.1"}, {"status": "affected", "version": "CE9.1.6"}, {"status": "affected", "version": "CE9.2.2"}, {"status": "affected", "version": "CE9.4.0"}, {"status": "affected", "version": "CE9.10.0"}, {"status": "affected", "version": "CE9.2.3"}, {"status": "affected", "version": "CE9.12.3"}, {"status": "affected", "version": "CE9.15.18.4"}, {"status": "affected", "version": "CE9.15.3.14"}, {"status": "affected", "version": "CE9.15.18.6"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tce-roomos-dos-9V9jrC2q", "name": "cisco-sa-tce-roomos-dos-9V9jrC2q"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of input received by an affected device. An attacker could exploit this vulnerability by getting the affected device to render crafted text, for example, a crafted meeting invitation. As indicated in the CVSS score, no user interaction is required, such as accepting the meeting invitation. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-1287", "description": "Improper Validation of Specified Type of Input"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-02-12T18:49:48.060Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20119", "state": "PUBLISHED", "dateUpdated": "2026-02-12T18:49:48.060Z", "dateReserved": "2025-10-08T11:59:15.377Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-02-04T16:12:04.796Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco RoomOS Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "RoomOS 10.11.2.2"}, {"status": "affected", "version": "RoomOS 10.15.2.2"}, {"status": "affected", "version": "RoomOS 11.5.4.6"}, {"status": "affected", "version": "RoomOS 11.5.2.4"}, {"status": "affected", "version": "RoomOS 10.8.2.5"}, {"status": "affected", "version": "RoomOS 10.11.5.2"}, {"status": "affected", "version": "RoomOS 10.11.3.0"}, {"status": "affected", "version": "RoomOS 10.15.5.3"}, {"status": "affected", "version": "RoomOS 10.19.2.2"}, {"status": "affected", "version": "RoomOS 11.1.3.1"}, {"status": "affected", "version": "RoomOS 10.11.6.0"}, {"status": "affected", "version": "RoomOS 10.19.3.0"}, {"status": "affected", "version": "RoomOS 10.19.4.2"}, {"status": "affected", "version": "RoomOS 10.3.2.4"}, {"status": "affected", "version": "RoomOS 10.3.4.0"}, {"status": "affected", "version": "RoomOS 10.15.3.0"}, {"status": "affected", "version": "RoomOS 11.1.4.1"}, {"status": "affected", "version": "RoomOS 11.14.2.3"}, {"status": "affected", "version": "RoomOS 11.1.2.4"}, {"status": "affected", "version": "RoomOS 10.8.3.1"}, {"status": "affected", "version": "RoomOS 11.14.2.1"}, {"status": "affected", "version": "RoomOS 10.3.3.0"}, {"status": "affected", "version": "RoomOS 10.8.4.0"}, {"status": "affected", "version": "RoomOS 10.15.4.1"}, {"status": "affected", "version": "RoomOS 10.19.5.6"}, {"status": "affected", "version": "RoomOS 10.11.4.1"}, {"status": "affected", "version": "RoomOS 11.9.3.1"}, {"status": "affected", "version": "RoomOS 11.5.3.3"}, {"status": "affected", "version": "RoomOS 10.3.2.0"}, {"status": "affected", "version": "RoomOS 11.9.2.4"}, {"status": "affected", "version": "RoomOS 11.14.3.0"}, {"status": "affected", "version": "RoomOS 11.17.2.2"}, {"status": "affected", "version": "RoomOS 11.14.4.0"}, {"status": "affected", "version": "RoomOS 10.19 StepUpg"}, {"status": "affected", "version": "RoomOS 11.17.3.0"}, {"status": "affected", "version": "RoomOS 11.20.2.3"}, {"status": "affected", "version": "RoomOS 11.14.5.0"}, {"status": "affected", "version": "RoomOS 11.17.4.0"}, {"status": "affected", "version": "RoomOS 11.20.3.0"}, {"status": "affected", "version": "RoomOS 11.23.1.6"}, {"status": "affected", "version": "RoomOS 11.23.1.8"}, {"status": "affected", "version": "RoomOS 11.24.1.5"}, {"status": "affected", "version": "RoomOS 11.24.2.4"}, {"status": "affected", "version": "RoomOS 11.24.3.0"}, {"status": "affected", "version": "RoomOS 11.24.4.1"}, {"status": "affected", "version": "RoomOS 11.27.2.0"}, {"status": "affected", "version": "RoomOS 11.28.1.3"}, {"status": "affected", "version": "RoomOS 11.27.3.0"}, {"status": "affected", "version": "RoomOS 11.31.1.5"}, {"status": "affected", "version": "RoomOS 11.27.4.0"}, {"status": "affected", "version": "RoomOS 11.32.2.1"}]}, {"defaultStatus": "unknown", "product": "Cisco TelePresence Endpoint Software (TC/CE)", "vendor": "Cisco", "versions": [{"status": "affected", "version": "CE9.3.0"}, {"status": "affected", "version": "CE9.10.2"}, {"status": "affected", "version": "CE9.2.6"}, {"status": "affected", "version": "CE9.5.0"}, {"status": "affected", "version": "CE9.3.3"}, {"status": "affected", "version": "CE9.1.4"}, {"status": "affected", "version": "CE9.3.2"}, {"status": "affected", "version": "CE9.4.2"}, {"status": "affected", "version": "CE9.3.1"}, {"status": "affected", "version": "CE9.2.5"}, {"status": "affected", "version": "CE9.9.3"}, {"status": "affected", "version": "CE9.5.3"}, {"status": "affected", "version": "CE9.10.3"}, {"status": "affected", "version": "CE9.1.5"}, {"status": "affected", "version": "CE9.5.2"}, {"status": "affected", "version": "CE9.4.1"}, {"status": "affected", "version": "CE9.6.1"}, {"status": "affected", "version": "CE9.2.4"}, {"status": "affected", "version": "CE9.5.1"}, {"status": "affected", "version": "CE9.10.1"}, {"status": "affected", "version": "CE9.1.2"}, {"status": "affected", "version": "CE9.1.1"}, {"status": "affected", "version": "CE9.9.4"}, {"status": "affected", "version": "CE9.2.1"}, {"status": "affected", "version": "CE9.1.3"}, {"status": "affected", "version": "CE9.0.1"}, {"status": "affected", "version": "CE9.1.6"}, {"status": "affected", "version": "CE9.2.2"}, {"status": "affected", "version": "CE9.4.0"}, {"status": "affected", "version": "CE9.10.0"}, {"status": "affected", "version": "CE9.2.3"}, {"status": "affected", "version": "CE9.12.3"}, {"status": "affected", "version": "CE9.15.18.4"}, {"status": "affected", "version": "CE9.15.3.14"}, {"status": "affected", "version": "CE9.15.18.6"}]}], "source": "psirt@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of input received by an affected device. An attacker could exploit this vulnerability by getting the affected device to render crafted text, for example, a crafted meeting invitation. As indicated in the CVSS score, no user interaction is required, such as accepting the meeting invitation. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."}, {"lang": "es", "value": "Una vulnerabilidad en el subsistema de renderizado de texto de Cisco TelePresence Collaboration Endpoint (CE) Software y Cisco RoomOS Software podr\u00eda permitir a un atacante remoto no autenticado causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada recibida por un dispositivo afectado. Un atacante podr\u00eda explotar esta vulnerabilidad haciendo que el dispositivo afectado renderice texto manipulado, por ejemplo, una invitaci\u00f3n a una reuni\u00f3n manipulada. Como se indica en la puntuaci\u00f3n CVSS, no se requiere interacci\u00f3n del usuario, como aceptar la invitaci\u00f3n a la reuni\u00f3n. Un exploit exitoso podr\u00eda permitir al atacante hacer que el dispositivo afectado se recargue, lo que resultar\u00eda en una condici\u00f3n de DoS."}], "id": "CVE-2026-20119", "lastModified": "2026-06-17T10:17:08.907", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20119", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-04T16:41:56.418229Z", "version": "2.0.3"}}]}, "published": "2026-02-04T17:16:14.457", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tce-roomos-dos-9V9jrC2q"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1287"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T13:48:56.079221+00:00", "value": {"mitigation_remediation": ["Download and install the Cisco\u2011provided firmware update for TelePresence Endpoint Software and RoomOS Software from the security advisory linked above.", "After applying the update, reboot the device to ensure the new code is running.", "Apply network segmentation or firewall rules to restrict unsolicited meeting invitations from untrusted networks until all devices are patched."], "summary": {"action": "Apply Patch", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "The affected products are Cisco RoomOS Software and Cisco TelePresence Endpoint Software (TC/CE). No specific version numbers are listed in the advisory, so all devices running these products are considered vulnerable until a patch is applied.", "description_and_impact": "A vulnerability exists in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software that allows a remote, unauthenticated attacker to engineer a denial of service by causing the device to reload. The flaw stems from insufficient validation of input, such that crafted text\u2014such as a malicious meeting invitation\u2014triggers the vulnerable rendering process. The weakness is a form of improper input validation (CWE\u20111287), meaning the attacker does not need any privileges or user interaction to execute the exploit, and the impact is a loss of availability for the affected device.", "risk_and_exploitability": "With a CVSS score of 7.5 the vulnerability is considered high severity, but the EPSS score of less than 1\u202f% indicates a low current probability of exploitation. The flaw is not listed in CISA\u2019s KEV catalog, suggesting no widespread exploitation has been observed. An attacker can remotely send crafted text to a device\u2014such as a malicious meeting invitation\u2014without any authentication or user action, resulting in a device reload and a denial of service. Based on the description, it is inferred that the attack vector is remote via network access; exposed network connectivity to the devices is the primary risk factor."}}}}, "created": "2026-02-04T21:18:02.114681+00:00", "updated": "2026-04-18T14:00:02.181719+00:00", "vendors": ["cisco", "cisco$PRODUCT$roomos", "cisco$PRODUCT$telepresence_ce", "cisco$PRODUCT$telepresence_ce_software", "cisco$PRODUCT$telepresence_tc", "cisco$PRODUCT$telepresence_tc_software"]}