Medium severity5.5NVD Advisory· Published Nov 18, 2020· Updated Jun 17, 2026

CVE-2020-26068

Description

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this vulnerability by using the xAPI service to generate a specific token. A successful exploit could allow the attacker to use the generated token to enable experimental features on the device that should not be available to users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./RoomOS
cpe:2.3:a:cisco:roomos:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Telepresence Collaboration Endpoint
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:*:*:*:*:*:*:*:*
Range: >=9.10.0,<9.10.3
Cisco Systems, Inc./Telepresence Ce Softwarellm-fuzzy
Cisco Systems, Inc./RoomOS Softwarellm-fuzzy
Cisco Systems, Inc./TelePresence Collaboration Endpoint (CE) Softwarecpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tp-uathracc-jWNESUfMnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000