CVE-2026-20057

EUVD-2026-9461
Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. 
 
This vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 36.08%
Affected Products (NVD)
VendorProductVersion
ciscosnort
3.0.0-233 ≤
𝑥
< 3.9.3.0
ciscocyber_vision
3.0.0
ciscocyber_vision
3.0.1
ciscocyber_vision
3.0.2
ciscocyber_vision
3.0.3
ciscocyber_vision
3.0.4
ciscocyber_vision
3.0.5
ciscocyber_vision
3.0.6
ciscocyber_vision
3.1.0
ciscocyber_vision
3.1.1
ciscocyber_vision
3.1.2
ciscocyber_vision
3.2.0
ciscocyber_vision
3.2.1
ciscocyber_vision
3.2.2
ciscocyber_vision
3.2.3
ciscocyber_vision
3.2.4
ciscocyber_vision
4.0.0
ciscocyber_vision
4.0.1
ciscocyber_vision
4.0.2
ciscocyber_vision
4.0.3
ciscocyber_vision
4.1.0
ciscocyber_vision
4.1.1
ciscocyber_vision
4.1.2
ciscocyber_vision
4.1.3
ciscocyber_vision
4.1.4
ciscocyber_vision
4.1.5
ciscocyber_vision
4.1.6
ciscocyber_vision
4.1.7
ciscocyber_vision
4.2.0
ciscocyber_vision
4.2.1
ciscocyber_vision
4.2.2
ciscocyber_vision
4.2.3
ciscocyber_vision
4.2.4
ciscocyber_vision
4.2.6
ciscocyber_vision
4.3.0
ciscocyber_vision
4.3.1
ciscocyber_vision
4.3.2
ciscocyber_vision
4.3.3
ciscocyber_vision
4.4.0
ciscocyber_vision
4.4.1
ciscocyber_vision
4.4.2
ciscocyber_vision
4.4.3
ciscocyber_vision
5.0.0
ciscocyber_vision
5.0.1
ciscocyber_vision
5.0.2
ciscocyber_vision
5.1.0
ciscocyber_vision
5.1.1
ciscocyber_vision
5.1.2
ciscocyber_vision
5.1.3
ciscocyber_vision
5.2.0
ciscocyber_vision
5.2.1
ciscocyber_vision
5.3.0
ciscocyber_vision
5.3.1
ciscosecure_firewall_threat_defense
7.2.0
ciscosecure_firewall_threat_defense
7.2.0.1
ciscosecure_firewall_threat_defense
7.2.1
ciscosecure_firewall_threat_defense
7.2.2
ciscosecure_firewall_threat_defense
7.2.3
ciscosecure_firewall_threat_defense
7.2.4
ciscosecure_firewall_threat_defense
7.2.4.1
ciscosecure_firewall_threat_defense
7.2.5
ciscosecure_firewall_threat_defense
7.2.5.1
ciscosecure_firewall_threat_defense
7.2.5.2
ciscosecure_firewall_threat_defense
7.2.6
ciscosecure_firewall_threat_defense
7.2.7
ciscosecure_firewall_threat_defense
7.2.8
ciscosecure_firewall_threat_defense
7.2.8.1
ciscosecure_firewall_threat_defense
7.2.9
ciscosecure_firewall_threat_defense
7.2.10
ciscosecure_firewall_threat_defense
7.2.10.2
ciscosecure_firewall_threat_defense
7.3.0
ciscosecure_firewall_threat_defense
7.3.1
ciscosecure_firewall_threat_defense
7.3.1.1
ciscosecure_firewall_threat_defense
7.3.1.2
ciscosecure_firewall_threat_defense
7.4.0
ciscosecure_firewall_threat_defense
7.4.1
ciscosecure_firewall_threat_defense
7.4.1.1
ciscosecure_firewall_threat_defense
7.4.2
ciscosecure_firewall_threat_defense
7.4.2.1
ciscosecure_firewall_threat_defense
7.4.2.2
ciscosecure_firewall_threat_defense
7.4.2.3
ciscosecure_firewall_threat_defense
7.4.2.4
ciscosecure_firewall_threat_defense
7.4.3
ciscosecure_firewall_threat_defense
7.6.0
ciscosecure_firewall_threat_defense
7.6.1
ciscosecure_firewall_threat_defense
7.6.2
ciscosecure_firewall_threat_defense
7.6.2.1
ciscosecure_firewall_threat_defense
7.7.0
ciscosecure_firewall_threat_defense
7.7.10
ciscosecure_firewall_threat_defense
7.7.10.1
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.2
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.3
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.3a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.4
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.4a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.4b:b
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5b:b
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5c:c
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5d:d
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.6
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.13.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.14.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.2a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.2c:c
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.3
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.3a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.4
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.4c:c
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.16.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.17.1
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.18.1
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.18.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.18.2
𝑥
= Vulnerable software versions