CVE-2026-20157

The record

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20157 are related to missing encryption that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-311.

Affected packages

Related vulnerabilities

• CVE-2026-111063 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. CWE-311
• CVE-2026-84676 Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted… CWE-311
• CVE-2026-81688 openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in… CWE-311
• CVE-2026-81681 openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB… CWE-311
• CVE-2026-19891 A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. CWE-311
• CVE-2026-21079 Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows… CWE-311
• CVE-2026-54784 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-311
• CVE-2026-55568 Guzzle is an extensible PHP HTTP client. CWE-311