Cisco RoomOS Software has a vulnerability identified as CVE-2026-20157, characterized by missing encryption of sensitive data, categorized under CWE-311. The vulnerability was discovered through Cisco's internal security review and results in high impact on confidentiality, integrity, and availability as reflected by a CVSS 3.1 base score of 7.5. The vulnerability requires high attack complexity and no privileges or user interaction for exploitation, with an attack vector of adjacent network. No remediation level or patch information has been provided so far.

The vulnerability allows unauthorized parties on an adjacent network to potentially access sensitive data in unencrypted form, compromising confidentiality, integrity, and availability of the affected system. This could lead to data leakage or manipulation within Cisco RoomOS environments. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been disclosed, organizations using Cisco RoomOS Software should monitor Cisco's advisories for updates and apply patches promptly once available.