Denial of Service Vulnerability in Cisco TelePresence Collaboration Endpoint and RoomOS Software

CVE-2026-20119

What is CVE-2026-20119?

A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an unauthenticated remote attacker to initiate a denial of service (DoS) condition. This issue arises from inadequate validation of inputs processed by the device. An attacker could exploit this vulnerability by convincing the affected system to render specially crafted text, such as a manipulated meeting invitation. Notably, the attack does not require any user interaction, allowing for potential exploitation without user consent. A successful attack could cause the device to unexpectedly reload, leading to a disruption in service.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References