5.8
Medium
CVE-2026-20058 Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an…
Description
Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Firewall Threat Defense (FTD) Software 7.7 | 7.7.0 → 7.7.10.1 | No fix stated |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.6 | 7.6.0 → 7.6.2.1 | No fix stated |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.4 | 7.4.0 → 7.4.3 | No fix stated |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.3 | 7.3.0 → 7.3.1.2 | No fix stated |
| Cisco Secure Firewall Threat Defense (FTD) Software 7.2 | 7.2.0 → 7.2.10.2 | No fix stated |
| Cisco UTD SNORT IPS Engine Software 17.18 | 17.18.1a → 17.18.2 | No fix stated |
| Cisco UTD SNORT IPS Engine Software | 17.17.1 | No fix stated |
| Cisco UTD SNORT IPS Engine Software | 17.16.1a | No fix stated |
| Cisco UTD SNORT IPS Engine Software 17.15 | 17.15.1a → 17.15.4 | No fix stated |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco UTD SNORT IPS Engine Software | 17.14.1a | No fix stated |
| Cisco UTD SNORT IPS Engine Software | 17.13.1a | No fix stated |
| Cisco UTD SNORT IPS Engine Software 17.12 | 17.12.1a → 17.12.6 | No fix stated |
| Cisco UTD SNORT IPS Engine Software 17.9 | 17.9.3a → 17.9.6 | No fix stated |
References
- cisco-sa-ftd-snort3-vbavuls-96UcVVed sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Secure Firewall Threat Defense (FTD) Software
The 81 CVEs of Cisco Secure Firewall Threat Defense (FTD) Software →
CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
8.6
High
CVE-2026-76489
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could…
5.8
Medium
CVE-2026-76445
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an…
5.3
Medium
CVE-2026-20356
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…
7.5
High