CVE-2026-20058
Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
- EPSS probability
- 0.39%
- CWE
- CWE-786
- Published
- 2026-03-04
- Last modified
- 2026-03-12
Affected products
- Cisco Cisco Secure Firewall Threat Defense (FTD) Software
- Cisco Cisco Secure Firewall Threat Defense (FTD) Software
- Cisco Cisco Secure Firewall Threat Defense (FTD) Software
- Cisco Cisco Secure Firewall Threat Defense (FTD) Software
- Cisco Cisco Secure Firewall Threat Defense (FTD) Software
- Cisco Cisco Secure Firewall Threat Defense (FTD) Software
- Cisco Cisco Secure Firewall Threat Defense (FTD) Software
- Cisco Cisco Secure Firewall Threat Defense (FTD) Software
Weakness type
Related vulnerabilities
- CVE-2023-46724 — SQUID-2023:4 Denial of Service in SSL Certificate validation
- CVE-2022-0522 — Access of Memory Location Before Start of Buffer in radareorg/radare2
- CVE-2022-0351 — Access of Memory Location Before Start of Buffer in vim/vim