CVE-2026-20119CWE-1287

Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability

High · published February 4, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
35.3
In the wild
Unconfirmed
What it is

⚡ An unauthenticated message is all it takes to crash your Cisco device! This vulnerability lets an attacker send a crafted meeting invitation that could restart your system at the worst moment. 🔥 It's like a delivery person bringing an envelope with a fake invitation that, when opened, makes your doorbell go haywire until you unplug it. No one wants their meeting interrupted because of a sneaky invitation! When exploited, an attacker could trigger a denial of service, causing your Cisco TelePresence device to reload unexpectedly. Imagine being in the middle of an important video call when suddenly, poof—your screen goes black! It's disruptive and could lead to loss of communication and productivity.

Put simply

It's like a delivery person bringing an envelope with a fake invitation that, when opened, makes your doorbell go haywire until you unplug it. No one wants their meeting interrupted because of a sneaky invitation! This vulnerability arises from insufficient input validation within the text rendering subsystem of Cisco TelePresence Collaboration Endpoint and Cisco RoomOS software, allowing crafted text to crash the device without user interaction.

What to do

When exploited, an attacker could trigger a denial of service, causing your Cisco TelePresence device to reload unexpectedly. Imagine being in the middle of an important video call when suddenly, poof—your screen goes black! It's disruptive and could lead to loss of communication and productivity. To mitigate this risk, ensure that your Cisco systems are updated to the latest software version available. Regularly check for security patches and apply them promptly to keep your devices safe. Don't forget to monitor your systems for any suspicious activity! You've got this! Stay proactive, and with a few simple updates, you'll keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.3th percentile
Weakness
CWE-1287 · Improper Validation of Specified Type of Input
Published
2026-02-04T16:12Z
EPSS history
Timeline
  • 04 FEB 16:12Z
    Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability
    cvelistv5