CVE-2026-20158

The record

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20158 are related to improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

Affected packages

Related vulnerabilities

• CVE-2026-79603 x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to… CWE-664
• CVE-2026-79289 Improper control of a resource through its lifetime in Workers in Google Chrome prior to… CWE-664
• CVE-2026-18549 @fastify/multipart is a multipart form-data parser for Fastify. CWE-664
• CVE-2026-64721 This issue was addressed through improved state management. CWE-664
• CVE-2026-8582 Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote… CWE-664
• CVE-2026-8517 Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168… CWE-664
• GHSA-f9jp-856v-8642 PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state CWE-664