CVE-2026-20119

A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of input received by an affected device. An attacker could exploit this vulnerability by getting the affected device to render crafted text, for example, a crafted meeting invitation. As indicated in the CVSS score, no user interaction is required, such as accepting the meeting invitation. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

• CWE-1287

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tce-roomos-dos-9V9jrC2q

Published

Feb 4, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20113A vulnerability in the web-based Cisco IOx application hosti…5.3
• CVE-2026-20114A vulnerability in the Lobby Ambassador web-based management…5.4
• CVE-2026-20115A vulnerability in Cisco IOS XE Software for Cisco Meraki co…6.1
• CVE-2026-20116A vulnerability in the web-based management interface of&nbs…6.1
• CVE-2026-20117A vulnerability in the web-based management interface of Cis…6.1
• CVE-2026-20118A vulnerability in the handling of an Egress Packet Network …6.8
• CVE-2026-2012A vulnerability was determined in itsourcecode Student Manag…9.8
• CVE-2026-20122A vulnerability in the API of Cisco Catalyst SD-WAN Manager …5.4
• CVE-2026-20123A vulnerability in the web-based management interface of Cis…6.1
• CVE-2026-20124A vulnerability in the Simple Network Management Protocol (S…7.7
• CVE-2026-20125A vulnerability in the HTTP Server feature of Cisco IOS Soft…7.7
• CVE-2026-20126A vulnerability in Cisco Catalyst SD-WAN Manager could allow…7.8