EXPOSURES › CVE-2026-20156

CVE-2026-20156

HIGH

DETAIL

SourceNVD · cve Published2026-07-15 CVSS8.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-20156 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

Cisco Systems Inc. · vendor roomos · product roomos cloud · product

DESCRIPTION

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20156 are related to improper restriction of operations within the bounds of a memory buffer that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-119.

AFFECTED FEDRAMP PRODUCTS · 8

PRODUCT	PROVIDER	STATUS	MATCH
Cisco Cloudlock for Government Cisco Systems Inc.	Cisco Systems Inc.	Authorized	vendor-exact · 0.90
Cisco Meraki for Government Cisco Systems Inc.	Cisco Systems Inc.	In Process	vendor-exact · 0.90
Cisco SD-WAN for Government Cisco Systems Inc.	Cisco Systems Inc.	In Process	vendor-exact · 0.90
Cisco Umbrella for Government Cisco Systems Inc.	Cisco Systems Inc.	In Process	vendor-exact · 0.90
Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc.	Cisco Systems Inc.	Authorized	vendor-exact · 0.90
Duo Federal Duo Security (A Cisco Company)	Duo Security (A Cisco Company)	Authorized	dex-judge · 0.95
WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc.	Cisco Systems Inc.	In Process	vendor-exact · 0.90
Webex for Government Cisco Systems Inc.	Cisco Systems Inc.	Authorized	vendor-exact · 0.90