NVD flags an unconfirmed ClickShare CX-20 Gen2 denial-of-service issue
ClickShare CX-20 Gen2
NVD record CVE-2026-100902 reports that ClickShare CX-20 Gen2 firmware through 02.26.00.0007 may be remotely disrupted through the wallpaper-upload function. RoomWatch did not find a matching Barco advisory during this run, so the affected-version and remediation state remain unconfirmed by the vendor.
Security teams should inventory CX-20 Gen2 units and keep this record in the recheck queue while requesting Barco remediation guidance. Do not treat a newer firmware build as a confirmed fix until Barco publishes an advisory or otherwise confirms the remediation boundary.
Relevant to enterprise and government ClickShare deployments because the secondary record describes remotely triggerable room-service disruption, but vendor confirmation is still missing