This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Cisco fixes 7 vulnerabilities in Cisco ISE and RoomOS

Cisco fixes 7 vulnerabilities in 2 products [1][2]. The most severe vulnerabilities are listed below. Individual products and their fixed versions: Cisco ISE - 3.3 Patch 12, 3.4 Patch 7, 3.5 Patch 4 (available September 2026) [1] or a hot patch [3][4] Cisco RoomOS - 11.32.6.0, 26.5.2.2 [2]

Cisco ISE - unauthorized file access (CVE-2026-20146)
CVSS 5.5 (Medium)

An authenticated remote attacker with administrator privileges can use a path traversal attack to gain the ability to read and delete arbitrary files [1].

The vulnerability is present in product:

  • Cisco ISE; >= 3.3, <3.3 Patch 12; >=3.4, <3.4 Patch 7; >=3.5, 3.5 Patch 4;

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

More information:

  • CVE-2026-20146 at cve.org, NVD
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') at cwe.mitre.org

The vulnerability was publicly disclosed 15. 7. 2026.

Cisco RoomOS - improper access control (CVE-2026-20150)
CVSS 8.8 (High)

An authenticated remote attacker can access certain resources without authorization [2].

The vulnerability is present in product:

  • Cisco RoomOS; <11.32.6.0; >=26.0.0.0, <26.5.2.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 8. 7. 2026.

By CESNET, z.s.p.o. Martin Krajči on 16. 7. 2026.

CESNET, z.s.p.o. Logo