Denial of Service Vulnerability in Cisco TelePresence Collaboration Endpoint and RoomOS Software

CVE-2026-20119

What is CVE-2026-20119?

A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an unauthenticated remote attacker to initiate a denial of service (DoS) condition. This issue arises from inadequate validation of inputs processed by the device. An attacker could exploit this vulnerability by convincing the affected system to render specially crafted text, such as a manipulated meeting invitation. Notably, the attack does not require any user interaction, allowing for potential exploitation without user consent. A successful attack could cause the device to unexpectedly reload, leading to a disruption in service.

References