CVE-2026-20054

EUVD-2026-9460

04.03.2026, 18:16

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.&nbsp;

This vulnerability is due to improper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to enter an infinite loop, causing a DoS condition.

Infinite Loop

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.8 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 36.08%

Affected Products (NVD)

Vendor	Product	Version
cisco	snort	3.0.0-233 ≤ 𝑥 < 3.9.3.0
cisco	cyber_vision	3.0.0
cisco	cyber_vision	3.0.1
cisco	cyber_vision	3.0.2
cisco	cyber_vision	3.0.3
cisco	cyber_vision	3.0.4
cisco	cyber_vision	3.0.5
cisco	cyber_vision	3.0.6
cisco	cyber_vision	3.1.0
cisco	cyber_vision	3.1.1
cisco	cyber_vision	3.1.2
cisco	cyber_vision	3.2.0
cisco	cyber_vision	3.2.1
cisco	cyber_vision	3.2.2
cisco	cyber_vision	3.2.3
cisco	cyber_vision	3.2.4
cisco	cyber_vision	4.0.0
cisco	cyber_vision	4.0.1
cisco	cyber_vision	4.0.2
cisco	cyber_vision	4.0.3
cisco	cyber_vision	4.1.0
cisco	cyber_vision	4.1.1
cisco	cyber_vision	4.1.2
cisco	cyber_vision	4.1.3
cisco	cyber_vision	4.1.4
cisco	cyber_vision	4.1.5
cisco	cyber_vision	4.1.6
cisco	cyber_vision	4.1.7
cisco	cyber_vision	4.2.0
cisco	cyber_vision	4.2.1
cisco	cyber_vision	4.2.2
cisco	cyber_vision	4.2.3
cisco	cyber_vision	4.2.4
cisco	cyber_vision	4.2.6
cisco	cyber_vision	4.3.0
cisco	cyber_vision	4.3.1
cisco	cyber_vision	4.3.2
cisco	cyber_vision	4.3.3
cisco	cyber_vision	4.4.0
cisco	cyber_vision	4.4.1
cisco	cyber_vision	4.4.2
cisco	cyber_vision	4.4.3
cisco	cyber_vision	5.0.0
cisco	cyber_vision	5.0.1
cisco	cyber_vision	5.0.2
cisco	cyber_vision	5.1.0
cisco	cyber_vision	5.1.1
cisco	cyber_vision	5.1.2
cisco	cyber_vision	5.1.3
cisco	cyber_vision	5.2.0
cisco	cyber_vision	5.2.1
cisco	cyber_vision	5.3.0
cisco	cyber_vision	5.3.1
cisco	cyber_vision	5.3.2
cisco	secure_firewall_threat_defense	7.2.0
cisco	secure_firewall_threat_defense	7.2.0.1
cisco	secure_firewall_threat_defense	7.2.1
cisco	secure_firewall_threat_defense	7.2.2
cisco	secure_firewall_threat_defense	7.2.3
cisco	secure_firewall_threat_defense	7.2.4
cisco	secure_firewall_threat_defense	7.2.4.1
cisco	secure_firewall_threat_defense	7.2.5
cisco	secure_firewall_threat_defense	7.2.5.1
cisco	secure_firewall_threat_defense	7.2.5.2
cisco	secure_firewall_threat_defense	7.2.6
cisco	secure_firewall_threat_defense	7.2.7
cisco	secure_firewall_threat_defense	7.2.8
cisco	secure_firewall_threat_defense	7.2.8.1
cisco	secure_firewall_threat_defense	7.2.9
cisco	secure_firewall_threat_defense	7.2.10
cisco	secure_firewall_threat_defense	7.2.10.2
cisco	secure_firewall_threat_defense	7.3.0
cisco	secure_firewall_threat_defense	7.3.1
cisco	secure_firewall_threat_defense	7.3.1.1
cisco	secure_firewall_threat_defense	7.3.1.2
cisco	secure_firewall_threat_defense	7.4.0
cisco	secure_firewall_threat_defense	7.4.1
cisco	secure_firewall_threat_defense	7.4.1.1
cisco	secure_firewall_threat_defense	7.4.2
cisco	secure_firewall_threat_defense	7.4.2.1
cisco	secure_firewall_threat_defense	7.4.2.2
cisco	secure_firewall_threat_defense	7.4.2.3
cisco	secure_firewall_threat_defense	7.4.2.4
cisco	secure_firewall_threat_defense	7.4.3
cisco	secure_firewall_threat_defense	7.6.0
cisco	secure_firewall_threat_defense	7.6.1
cisco	secure_firewall_threat_defense	7.6.2
cisco	secure_firewall_threat_defense	7.6.2.1
cisco	secure_firewall_threat_defense	7.7.0
cisco	secure_firewall_threat_defense	7.7.10
cisco	secure_firewall_threat_defense	7.7.10.1
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	3.17.0s:s
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	3.17.1s:s
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.6.1
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.6.5
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.6.6
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.6.7a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.6.9
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.6.10
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.12.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.12.2
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.12.3
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.12.4
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.12.5
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.12.6
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.12.7
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	16.12.8
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.1.1
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.2.1r:r
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.2
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.3
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.4
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.4a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.5
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.6
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.7
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.8
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.3.8a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.4.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.4.1b:b
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.4.2
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.5.1
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.5.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.2
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.3
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.3a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.4
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.5
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.6
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.6a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.7
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.8
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.6.8a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.7.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.7.2
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.8.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.2a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.3a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.4
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.4a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.5a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.5e:e
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.5f:f
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.6
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.7a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.7b:b
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.9.8
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.10.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.11.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.2
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.3
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.3a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.4
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.4a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.4b:b
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.5
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.5a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.5b:b
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.5c:c
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.5d:d
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.12.6
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.13.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.14.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.15.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.15.2a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.15.2c:c
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.15.3
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.15.3a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.15.4
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.15.4c:c
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.16.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.17.1
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.18.1
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.18.1a:a
cisco	unified_threat_defense_snort_intrusion_prevention_system_engine	17.18.2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
The program contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed