CVE-2026-20058

Published: Mar 4, 2026Modified: Aug 20, 2026

5.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: psirt@cisco.com (Secondary)

Description

Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.

Affected (68)

Products: Cisco: Snort, Secure Firewall Threat Defense, Unified Threat Defense Snort Intrusion Prevention System Engine

Cisco

3 products

Snort

Secure Firewall Threat Defense

Unified Threat Defense Snort Intrusion Prevention System Engine

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Snort	From 3.0.0-233 to 3.9.6.0

Configuration B

37 vulnerable

Vulnerable Software	Affected Versions
Cisco Secure Firewall Threat Defense	Version 7.2.0.1
Cisco Secure Firewall Threat Defense	Version 7.2.0
Cisco Secure Firewall Threat Defense	Version 7.2.10.2
Cisco Secure Firewall Threat Defense	Version 7.2.10
Cisco Secure Firewall Threat Defense	Version 7.2.1
Cisco Secure Firewall Threat Defense	Version 7.2.2
Cisco Secure Firewall Threat Defense	Version 7.2.3
Cisco Secure Firewall Threat Defense	Version 7.2.4.1
Cisco Secure Firewall Threat Defense	Version 7.2.4
Cisco Secure Firewall Threat Defense	Version 7.2.5.1
Cisco Secure Firewall Threat Defense	Version 7.2.5.2
Cisco Secure Firewall Threat Defense	Version 7.2.5
Cisco Secure Firewall Threat Defense	Version 7.2.6
Cisco Secure Firewall Threat Defense	Version 7.2.7
Cisco Secure Firewall Threat Defense	Version 7.2.8.1
Cisco Secure Firewall Threat Defense	Version 7.2.8
Cisco Secure Firewall Threat Defense	Version 7.2.9
Cisco Secure Firewall Threat Defense	Version 7.3.0
Cisco Secure Firewall Threat Defense	Version 7.3.1.1
Cisco Secure Firewall Threat Defense	Version 7.3.1.2
Cisco Secure Firewall Threat Defense	Version 7.3.1
Cisco Secure Firewall Threat Defense	Version 7.4.0
Cisco Secure Firewall Threat Defense	Version 7.4.1.1
Cisco Secure Firewall Threat Defense	Version 7.4.1
Cisco Secure Firewall Threat Defense	Version 7.4.2.1
Cisco Secure Firewall Threat Defense	Version 7.4.2.2
Cisco Secure Firewall Threat Defense	Version 7.4.2.3
Cisco Secure Firewall Threat Defense	Version 7.4.2.4
Cisco Secure Firewall Threat Defense	Version 7.4.2
Cisco Secure Firewall Threat Defense	Version 7.4.3
Cisco Secure Firewall Threat Defense	Version 7.6.0
Cisco Secure Firewall Threat Defense	Version 7.6.1
Cisco Secure Firewall Threat Defense	Version 7.6.2.1
Cisco Secure Firewall Threat Defense	Version 7.6.2
Cisco Secure Firewall Threat Defense	Version 7.7.0
Cisco Secure Firewall Threat Defense	Version 7.7.10.1
Cisco Secure Firewall Threat Defense	Version 7.7.10

Configuration C

30 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.3a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.4a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.4b
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.5
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.5a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.5b
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.5c
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.5d
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.12.6
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.13.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.14.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.15.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.15.2a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.15.2c
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.15.3
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.15.3a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.15.4
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.15.4c
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.16.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.17.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.18.1
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.18.1a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.18.2
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.9.3a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.9.5a
Cisco Unified Threat Defense Snort Intrusion Prevention System Engine	Version 17.9.6

Related CWEs

CWE-786

Access of Memory Location Before Start of Buffer

The product reads or writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed

Source: psirt@cisco.com

MitigationVendor Advisory

Timeline

No history available yet.