Skip to content
fr Sign in
5.8 Medium

CVE-2026-20054 Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an…

Description

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.  This vulnerability is due to improper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to enter an infinite loop, causing a DoS condition.

Affected products and versions

Product Affected versions Fixed in
Cisco Cyber Vision 5.3 5.3.0 → 5.3.2 No fix stated
Cisco Cyber Vision 5.2 5.2.0 → 5.2.1 No fix stated
Cisco Cyber Vision 5.1 5.1.0 → 5.1.3 No fix stated
Cisco Cyber Vision 5.0 5.0.0 → 5.0.2 No fix stated
Cisco Cyber Vision 4.4 4.4.0 → 4.4.3 No fix stated
Cisco Cyber Vision 4.3 4.3.0 → 4.3.3 No fix stated
Cisco Cyber Vision 4.2 4.2.X → 4.2.6 No fix stated
Cisco Cyber Vision 4.1 4.1.0 → 4.1.7 No fix stated
Cisco Cyber Vision 4.0 4.0.0 → 4.0.3 No fix stated
Show the 29 other branches
Product Affected versions Fixed in
Cisco Cyber Vision 3.2 3.2.0 → 3.2.4 No fix stated
Cisco Cyber Vision 3.1 3.1.0 → 3.1.2 No fix stated
Cisco Cyber Vision 3.0 3.0.0 → 3.0.6 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.7 7.7.0 → 7.7.10.1 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.6 7.6.0 → 7.6.2.1 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.4 7.4.0 → 7.4.3 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.3 7.3.0 → 7.3.1.2 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.2 7.2.0 → 7.2.10.2 No fix stated
Cisco UTD SNORT IPS Engine Software 17.18 17.18.1a → 17.18.2 No fix stated
Cisco UTD SNORT IPS Engine Software 17.17.1 No fix stated
Cisco UTD SNORT IPS Engine Software 17.16.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.15 17.15.1a → 17.15.4 No fix stated
Cisco UTD SNORT IPS Engine Software 17.14.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.13.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.12 17.12.1a → 17.12.6 No fix stated
Cisco UTD SNORT IPS Engine Software 17.11.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.10.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.9 17.9.1a → 17.9.8 No fix stated
Cisco UTD SNORT IPS Engine Software 17.8.1a No fix stated
Cisco UTD SNORT IPS Engine Software 17.7 17.7.1a → 17.7.2 No fix stated
Cisco UTD SNORT IPS Engine Software 17.6 17.6.1a → 17.6.8 No fix stated
Cisco UTD SNORT IPS Engine Software 17.5 17.5.1a → 17.5.1 No fix stated
Cisco UTD SNORT IPS Engine Software 17.4 17.4.1a → 17.4.2 No fix stated
Cisco UTD SNORT IPS Engine Software 17.3 17.3.1a → 17.3.8 No fix stated
Cisco UTD SNORT IPS Engine Software 17.2.1r No fix stated
Cisco UTD SNORT IPS Engine Software 17.1.1 No fix stated
Cisco UTD SNORT IPS Engine Software 16.12 16.12.1a → 16.12.8 No fix stated
Cisco UTD SNORT IPS Engine Software 16.6 16.6.1 → 16.6.10 No fix stated
Cisco UTD SNORT IPS Engine Software 3.17 3.17.0S → 3.17.1S No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Cyber Vision

The 20 CVEs of Cisco Cyber Vision →
CVE-2026-20356 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3… 7.5 High CVE-2026-20236 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3… 7.5 High CVE-2026-20291 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3… 7.8 High CVE-2026-20221 Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel… 5.8 Medium
Track this CVE