CVE-2026-20058

EUVD-2026-9462
Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.

These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 31.99%
Affected Products (NVD)
VendorProductVersion
ciscosnort
3.0.0-233 ≤
𝑥
< 3.9.6.0
ciscosecure_firewall_threat_defense
7.2.0
ciscosecure_firewall_threat_defense
7.2.0.1
ciscosecure_firewall_threat_defense
7.2.1
ciscosecure_firewall_threat_defense
7.2.2
ciscosecure_firewall_threat_defense
7.2.3
ciscosecure_firewall_threat_defense
7.2.4
ciscosecure_firewall_threat_defense
7.2.4.1
ciscosecure_firewall_threat_defense
7.2.5
ciscosecure_firewall_threat_defense
7.2.5.1
ciscosecure_firewall_threat_defense
7.2.5.2
ciscosecure_firewall_threat_defense
7.2.6
ciscosecure_firewall_threat_defense
7.2.7
ciscosecure_firewall_threat_defense
7.2.8
ciscosecure_firewall_threat_defense
7.2.8.1
ciscosecure_firewall_threat_defense
7.2.9
ciscosecure_firewall_threat_defense
7.2.10
ciscosecure_firewall_threat_defense
7.2.10.2
ciscosecure_firewall_threat_defense
7.3.0
ciscosecure_firewall_threat_defense
7.3.1
ciscosecure_firewall_threat_defense
7.3.1.1
ciscosecure_firewall_threat_defense
7.3.1.2
ciscosecure_firewall_threat_defense
7.4.0
ciscosecure_firewall_threat_defense
7.4.1
ciscosecure_firewall_threat_defense
7.4.1.1
ciscosecure_firewall_threat_defense
7.4.2
ciscosecure_firewall_threat_defense
7.4.2.1
ciscosecure_firewall_threat_defense
7.4.2.2
ciscosecure_firewall_threat_defense
7.4.2.3
ciscosecure_firewall_threat_defense
7.4.2.4
ciscosecure_firewall_threat_defense
7.4.3
ciscosecure_firewall_threat_defense
7.6.0
ciscosecure_firewall_threat_defense
7.6.1
ciscosecure_firewall_threat_defense
7.6.2
ciscosecure_firewall_threat_defense
7.6.2.1
ciscosecure_firewall_threat_defense
7.7.0
ciscosecure_firewall_threat_defense
7.7.10
ciscosecure_firewall_threat_defense
7.7.10.1
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.9.3a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.9.5a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.9.6
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.2
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.3
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.3a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.4
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.4a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.4b:b
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5b:b
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5c:c
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.5d:d
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.12.6
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.13.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.14.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.2a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.2c:c
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.3
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.3a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.4
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.15.4c:c
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.16.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.17.1
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.18.1
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.18.1a:a
ciscounified_threat_defense_snort_intrusion_prevention_system_engine
17.18.2
𝑥
= Vulnerable software versions