Refine your search
81 vulnerabilities found for Cisco Secure Firewall Threat Defense (FTD) Software by Cisco
CVE-2026-76418 (GCVE-0-2026-76418)
Vulnerability from cvelistv5
Published
2026-10-28 20:05
Modified
2026-10-28 20:05
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-690 - Unchecked Return Value to NULL Pointer Dereference
Summary
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.18.1 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.19.1 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.19.1.5 Version: 9.16.4.18 Version: 9.19.1.9 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.19.1.12 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.19.1.18 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.19.1.22 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.19.1.24 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.19.1.27 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.19.1.28 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.19.1.31 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.19.1.37 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.19.1.38 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.18.4.82 Version: 9.24.10 Version: 9.18.4.90 Version: 9.20.4.46 Version: 9.20.4.235 Version: 9.20.4.49 Version: 9.22.3.26 Version: 9.16.4.103 Version: 9.18.4.94 Version: 9.23.1.47 Version: 9.24.1.26 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.18.1"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.19.1"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.19.1.5"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.19.1.9"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.19.1.12"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.19.1.18"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.19.1.22"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.19.1.24"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.19.1.27"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.19.1.28"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.19.1.31"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.19.1.37"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.19.1.38"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.24.10"
},
{
"status": "affected",
"version": "9.18.4.90"
},
{
"status": "affected",
"version": "9.20.4.46"
},
{
"status": "affected",
"version": "9.20.4.235"
},
{
"status": "affected",
"version": "9.20.4.49"
},
{
"status": "affected",
"version": "9.22.3.26"
},
{
"status": "affected",
"version": "9.16.4.103"
},
{
"status": "affected",
"version": "9.18.4.94"
},
{
"status": "affected",
"version": "9.23.1.47"
},
{
"status": "affected",
"version": "9.24.1.26"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
},
{
"status": "affected",
"version": "7.4.8"
},
{
"status": "affected",
"version": "7.2.12"
},
{
"status": "affected",
"version": "7.6.6"
},
{
"status": "affected",
"version": "7.7.13"
},
{
"status": "affected",
"version": "10.0.2"
},
{
"status": "affected",
"version": "7.0.10"
},
{
"status": "affected",
"version": "10.1.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-690",
"description": "Unchecked Return Value to NULL Pointer Dereference",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T20:05:31.926Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-asaftd-tunnel-dos-s6mgkb75",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75"
}
],
"source": {
"advisory": "cisco-sa-asaftd-tunnel-dos-s6mgkb75",
"defects": [
"CSCwx26625"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76418",
"datePublished": "2026-10-28T20:05:31.926Z",
"dateReserved": "2026-08-19T12:02:03.633Z",
"dateUpdated": "2026-10-28T20:05:31.926Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76489 (GCVE-0-2026-76489)
Vulnerability from cvelistv5
Published
2026-10-21 16:17
Modified
2026-10-22 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-401 - Missing Release of Memory after Effective Lifetime
Summary
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Version: 3.12.2.0 Version: 3.1.2.0 Version: 3.1.3.0 Version: 3.1.4.0 Version: 3.1.5.0 Version: 3.1.6.0 Version: 3.1.7.0 Version: 3.1.8.0 Version: 3.1.9.0 Version: 3.1.10.0 Version: 3.1.12.0 Version: 3.1.13.0 Version: 3.1.14.0 Version: 3.1.15.0 Version: 3.1.16.0 Version: 3.1.17.0 Version: 3.1.18.0 Version: 3.1.19.0 Version: 3.1.20.0 Version: 3.1.21.0 Version: 3.1.22.0 Version: 3.1.23.0 Version: 3.1.24.0 Version: 3.1.25.0 Version: 3.1.27.0 Version: 3.1.28.0 Version: 3.1.29.0 Version: 3.1.30.0 Version: 3.1.31.0 Version: 3.1.32.0 Version: 3.1.36.0 Version: 3.1.38.0 Version: 3.1.39.0 Version: 3.1.40.0 Version: 3.1.41.0 Version: 3.1.42.0 Version: 3.1.43.0 Version: 3.1.45.0 Version: 3.1.47.0 Version: 3.1.48.0 Version: 3.1.50.0 Version: 3.1.51.0 Version: 3.1.52.0 Version: 3.1.53.0 Version: 3.1.55.0 Version: 3.1.56.0 Version: 3.1.57.0 Version: 3.1.58.0 Version: 3.1.59.0 Version: 3.1.60.0 Version: 3.1.61.0 Version: 3.1.62.0 Version: 3.1.63.0 Version: 3.1.64.0 Version: 3.1.65.0 Version: 3.1.66.0 Version: 3.1.67.0 Version: 3.1.69.0 Version: 3.1.70.0 Version: 3.1.71.0 Version: 3.1.72.0 Version: 3.1.73.0 Version: 3.1.74.0 Version: 3.1.75.0 Version: 3.1.76.0 Version: 3.1.77.0 Version: 3.1.78.0 Version: 3.1.81.0 Version: 3.1.82.0 Version: 3.1.83.0 Version: 3.1.84.0 Version: 3.2.1.0 Version: 3.2.2.0 Version: 3.3.0.0 Version: 3.3.1.0 Version: 3.3.2.0 Version: 3.3.3.0 Version: 3.3.4.0 Version: 3.3.5.0 Version: 3.3.7.0 Version: 3.5.0.0 Version: 3.5.1.0 Version: 3.8.1.0 Version: 3.6.0.0 Version: 3.6.2.0 Version: 3.9.3.0 Version: 3.7.2.0 Version: 3.7.0.0 Version: 3.9.6.0 Version: 3.10.0.0 Version: 3.10.2.0 Version: 3.7.4.0 Version: 3.9.0.0 Version: 3.5.2.0 Version: 3.12.1.0 Version: 3.6.1.0 Version: 3.9.2.0 Version: 3.6.3.0 Version: 3.9.5.0 Version: 3.7.1.0 Version: 3.9.7.0 Version: 3.7.3.0 Version: 3.10.1.0 Version: 3.9.1.0 Version: 3.11.1.0 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76489",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:14:49.074914Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:52.954Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-401",
"description": "Missing Release of Memory after Effective Lifetime",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:31.788Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-misc-dos-6mB22qAK",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-misc-dos-6mB22qAK"
}
],
"source": {
"advisory": "cisco-sa-snort3-misc-dos-6mB22qAK",
"defects": [
"CSCwr25134"
],
"discovery": "EXTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76489",
"datePublished": "2026-10-21T16:17:23.396Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-10-22T19:11:31.788Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76445 (GCVE-0-2026-76445)
Vulnerability from cvelistv5
Published
2026-10-21 16:14
Modified
2026-10-22 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Summary
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition.
The vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers are processed within the codec. An attacker could exploit this vulnerability by sending a crafted, fragmented UDP datagram that contains these headers to the Snort 3 Detection Engine of an affected device. A successful exploit could allow the attacker to cause the detection engine to enter an infinite loop, resulting in a DoS condition.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Version: 3.12.2.0 Version: 3.1.2.0 Version: 3.1.3.0 Version: 3.1.4.0 Version: 3.1.5.0 Version: 3.1.6.0 Version: 3.1.7.0 Version: 3.1.8.0 Version: 3.1.9.0 Version: 3.1.10.0 Version: 3.1.12.0 Version: 3.1.13.0 Version: 3.1.14.0 Version: 3.1.15.0 Version: 3.1.16.0 Version: 3.1.17.0 Version: 3.1.18.0 Version: 3.1.19.0 Version: 3.1.20.0 Version: 3.1.21.0 Version: 3.1.22.0 Version: 3.1.23.0 Version: 3.1.24.0 Version: 3.1.25.0 Version: 3.1.27.0 Version: 3.1.28.0 Version: 3.1.29.0 Version: 3.1.30.0 Version: 3.1.31.0 Version: 3.1.32.0 Version: 3.1.36.0 Version: 3.1.38.0 Version: 3.1.39.0 Version: 3.1.40.0 Version: 3.1.41.0 Version: 3.1.42.0 Version: 3.1.43.0 Version: 3.1.45.0 Version: 3.1.47.0 Version: 3.1.48.0 Version: 3.1.50.0 Version: 3.1.51.0 Version: 3.1.52.0 Version: 3.1.53.0 Version: 3.1.55.0 Version: 3.1.56.0 Version: 3.1.57.0 Version: 3.1.58.0 Version: 3.1.59.0 Version: 3.1.60.0 Version: 3.1.61.0 Version: 3.1.62.0 Version: 3.1.63.0 Version: 3.1.64.0 Version: 3.1.65.0 Version: 3.1.66.0 Version: 3.1.67.0 Version: 3.1.69.0 Version: 3.1.70.0 Version: 3.1.71.0 Version: 3.1.72.0 Version: 3.1.73.0 Version: 3.1.74.0 Version: 3.1.75.0 Version: 3.1.76.0 Version: 3.1.77.0 Version: 3.1.78.0 Version: 3.1.81.0 Version: 3.1.82.0 Version: 3.1.83.0 Version: 3.1.84.0 Version: 3.2.1.0 Version: 3.2.2.0 Version: 3.3.0.0 Version: 3.3.1.0 Version: 3.3.2.0 Version: 3.3.3.0 Version: 3.3.4.0 Version: 3.3.5.0 Version: 3.3.7.0 Version: 3.5.0.0 Version: 3.5.1.0 Version: 3.8.1.0 Version: 3.6.0.0 Version: 3.6.2.0 Version: 3.9.3.0 Version: 3.7.2.0 Version: 3.7.0.0 Version: 3.9.6.0 Version: 3.10.0.0 Version: 3.10.2.0 Version: 3.7.4.0 Version: 3.9.0.0 Version: 3.5.2.0 Version: 3.12.1.0 Version: 3.6.1.0 Version: 3.9.2.0 Version: 3.6.3.0 Version: 3.9.5.0 Version: 3.7.1.0 Version: 3.9.7.0 Version: 3.7.3.0 Version: 3.10.1.0 Version: 3.9.1.0 Version: 3.11.1.0 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76445",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:16:58.668961Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:54.614Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition.\r\n\r\nThe vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers are processed within the codec. An attacker could exploit this vulnerability by sending a crafted, fragmented UDP datagram that contains these headers to the Snort 3 Detection Engine of an affected device. A successful exploit could allow the attacker to cause the detection engine to enter an infinite loop, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-835",
"description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:11.783Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-gtpcodec-dos-Rmecfepz",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gtpcodec-dos-Rmecfepz"
}
],
"source": {
"advisory": "cisco-sa-snort3-gtpcodec-dos-Rmecfepz",
"defects": [
"CSCwu17795"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76445",
"datePublished": "2026-10-21T16:14:39.374Z",
"dateReserved": "2026-08-19T12:02:03.635Z",
"dateUpdated": "2026-10-22T19:11:11.783Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20356 (GCVE-0-2026-20356)
Vulnerability from cvelistv5
Published
2026-10-21 16:13
Modified
2026-10-22 19:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-400 - Uncontrolled Resource Consumption
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20356 are related to issues concerning uncontrolled resource consumption that are grouped under the Common Weakness Enumeration (CWE) Base CWE-400.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Cyber Vision |
Version: 3.0.0 Version: 3.0.2 Version: 3.0.3 Version: 3.0.1 Version: 3.1.0 Version: 3.0.4 Version: 3.1.1 Version: 3.1.2 Version: 3.2.0 Version: 3.0.5 Version: 3.2.1 Version: 3.0.6 Version: 3.2.2 Version: 3.2.3 Version: 3.2.4 Version: 4.0.0 Version: 4.0.1 Version: 4.0.2 Version: 4.0.3 Version: 4.1.0 Version: 4.1.1 Version: 4.1.2 Version: 4.1.3 Version: 4.1.4 Version: 4.2.0 Version: 4.2.1 Version: 4.1.5 Version: 4.2.2 Version: 4.2.X Version: 4.2.3 Version: 4.2.4 Version: 4.2.6 Version: 4.1.6 Version: 4.3.0 Version: 4.3.1 Version: 4.3.2 Version: 4.3.3 Version: 4.4.0 Version: 4.4.1 Version: 4.4.2 Version: 4.4.3 Version: 4.1.7 Version: 5.0.0 Version: 5.0.1 Version: 5.0.2 Version: 5.1.0 Version: 5.1.1 Version: 5.1.2 Version: 5.1.3 Version: 5.2.0 Version: 5.2.1 Version: 5.3.0 Version: 5.3.1 Version: 5.3.2 Version: 5.3.3 Version: 5.5.1 Version: 5.6.1 Version: 5.4.0 Version: 5.4.1 Version: 5.4.2 Version: 5.7.0 Version: 5.8.1 Version: 5.7.1 Version: 5.8.0 Version: 5.5.2 |
|||||||||||||||||
|
|||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20356",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:17:11.794234Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:55.050Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Cyber Vision",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.2.0"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.2.1"
},
{
"status": "affected",
"version": "3.0.6"
},
{
"status": "affected",
"version": "3.2.2"
},
{
"status": "affected",
"version": "3.2.3"
},
{
"status": "affected",
"version": "3.2.4"
},
{
"status": "affected",
"version": "4.0.0"
},
{
"status": "affected",
"version": "4.0.1"
},
{
"status": "affected",
"version": "4.0.2"
},
{
"status": "affected",
"version": "4.0.3"
},
{
"status": "affected",
"version": "4.1.0"
},
{
"status": "affected",
"version": "4.1.1"
},
{
"status": "affected",
"version": "4.1.2"
},
{
"status": "affected",
"version": "4.1.3"
},
{
"status": "affected",
"version": "4.1.4"
},
{
"status": "affected",
"version": "4.2.0"
},
{
"status": "affected",
"version": "4.2.1"
},
{
"status": "affected",
"version": "4.1.5"
},
{
"status": "affected",
"version": "4.2.2"
},
{
"status": "affected",
"version": "4.2.X"
},
{
"status": "affected",
"version": "4.2.3"
},
{
"status": "affected",
"version": "4.2.4"
},
{
"status": "affected",
"version": "4.2.6"
},
{
"status": "affected",
"version": "4.1.6"
},
{
"status": "affected",
"version": "4.3.0"
},
{
"status": "affected",
"version": "4.3.1"
},
{
"status": "affected",
"version": "4.3.2"
},
{
"status": "affected",
"version": "4.3.3"
},
{
"status": "affected",
"version": "4.4.0"
},
{
"status": "affected",
"version": "4.4.1"
},
{
"status": "affected",
"version": "4.4.2"
},
{
"status": "affected",
"version": "4.4.3"
},
{
"status": "affected",
"version": "4.1.7"
},
{
"status": "affected",
"version": "5.0.0"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "5.0.2"
},
{
"status": "affected",
"version": "5.1.0"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1.3"
},
{
"status": "affected",
"version": "5.2.0"
},
{
"status": "affected",
"version": "5.2.1"
},
{
"status": "affected",
"version": "5.3.0"
},
{
"status": "affected",
"version": "5.3.1"
},
{
"status": "affected",
"version": "5.3.2"
},
{
"status": "affected",
"version": "5.3.3"
},
{
"status": "affected",
"version": "5.5.1"
},
{
"status": "affected",
"version": "5.6.1"
},
{
"status": "affected",
"version": "5.4.0"
},
{
"status": "affected",
"version": "5.4.1"
},
{
"status": "affected",
"version": "5.4.2"
},
{
"status": "affected",
"version": "5.7.0"
},
{
"status": "affected",
"version": "5.8.1"
},
{
"status": "affected",
"version": "5.7.1"
},
{
"status": "affected",
"version": "5.8.0"
},
{
"status": "affected",
"version": "5.5.2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20356 are related to issues concerning uncontrolled resource consumption that are grouped under the Common Weakness Enumeration (CWE) Base CWE-400."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Uncontrolled Resource Consumption",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:10:52.805Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-snort3-ybgmhTQe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe"
}
],
"source": {
"advisory": "cisco-sa-hardening-snort3-ybgmhTQe",
"defects": [
"CSCwu24015"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Software Hardening Release: October 2026"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20356",
"datePublished": "2026-10-21T16:13:06.738Z",
"dateReserved": "2025-10-08T11:59:15.414Z",
"dateUpdated": "2026-10-22T19:10:52.805Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20236 (GCVE-0-2026-20236)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 19:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-682 - Incorrect Calculation
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Cyber Vision |
Version: 3.0.0 Version: 3.0.2 Version: 3.0.3 Version: 3.0.1 Version: 3.1.0 Version: 3.0.4 Version: 3.1.1 Version: 3.1.2 Version: 3.2.0 Version: 3.0.5 Version: 3.2.1 Version: 3.0.6 Version: 3.2.2 Version: 3.2.3 Version: 3.2.4 Version: 4.0.0 Version: 4.0.1 Version: 4.0.2 Version: 4.0.3 Version: 4.1.0 Version: 4.1.1 Version: 4.1.2 Version: 4.1.3 Version: 4.1.4 Version: 4.2.0 Version: 4.2.1 Version: 4.1.5 Version: 4.2.2 Version: 4.2.X Version: 4.2.3 Version: 4.2.4 Version: 4.2.6 Version: 4.1.6 Version: 4.3.0 Version: 4.3.1 Version: 4.3.2 Version: 4.3.3 Version: 4.4.0 Version: 4.4.1 Version: 4.4.2 Version: 4.4.3 Version: 4.1.7 Version: 5.0.0 Version: 5.0.1 Version: 5.0.2 Version: 5.1.0 Version: 5.1.1 Version: 5.1.2 Version: 5.1.3 Version: 5.2.0 Version: 5.2.1 Version: 5.3.0 Version: 5.3.1 Version: 5.3.2 Version: 5.3.3 Version: 5.5.1 Version: 5.6.1 Version: 5.4.0 Version: 5.4.1 Version: 5.4.2 Version: 5.7.0 Version: 5.8.1 Version: 5.7.1 Version: 5.8.0 Version: 5.5.2 |
|||||||||||||||||
|
|||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20236",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:17:22.593333Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:55.208Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Cyber Vision",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.2.0"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.2.1"
},
{
"status": "affected",
"version": "3.0.6"
},
{
"status": "affected",
"version": "3.2.2"
},
{
"status": "affected",
"version": "3.2.3"
},
{
"status": "affected",
"version": "3.2.4"
},
{
"status": "affected",
"version": "4.0.0"
},
{
"status": "affected",
"version": "4.0.1"
},
{
"status": "affected",
"version": "4.0.2"
},
{
"status": "affected",
"version": "4.0.3"
},
{
"status": "affected",
"version": "4.1.0"
},
{
"status": "affected",
"version": "4.1.1"
},
{
"status": "affected",
"version": "4.1.2"
},
{
"status": "affected",
"version": "4.1.3"
},
{
"status": "affected",
"version": "4.1.4"
},
{
"status": "affected",
"version": "4.2.0"
},
{
"status": "affected",
"version": "4.2.1"
},
{
"status": "affected",
"version": "4.1.5"
},
{
"status": "affected",
"version": "4.2.2"
},
{
"status": "affected",
"version": "4.2.X"
},
{
"status": "affected",
"version": "4.2.3"
},
{
"status": "affected",
"version": "4.2.4"
},
{
"status": "affected",
"version": "4.2.6"
},
{
"status": "affected",
"version": "4.1.6"
},
{
"status": "affected",
"version": "4.3.0"
},
{
"status": "affected",
"version": "4.3.1"
},
{
"status": "affected",
"version": "4.3.2"
},
{
"status": "affected",
"version": "4.3.3"
},
{
"status": "affected",
"version": "4.4.0"
},
{
"status": "affected",
"version": "4.4.1"
},
{
"status": "affected",
"version": "4.4.2"
},
{
"status": "affected",
"version": "4.4.3"
},
{
"status": "affected",
"version": "4.1.7"
},
{
"status": "affected",
"version": "5.0.0"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "5.0.2"
},
{
"status": "affected",
"version": "5.1.0"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1.3"
},
{
"status": "affected",
"version": "5.2.0"
},
{
"status": "affected",
"version": "5.2.1"
},
{
"status": "affected",
"version": "5.3.0"
},
{
"status": "affected",
"version": "5.3.1"
},
{
"status": "affected",
"version": "5.3.2"
},
{
"status": "affected",
"version": "5.3.3"
},
{
"status": "affected",
"version": "5.5.1"
},
{
"status": "affected",
"version": "5.6.1"
},
{
"status": "affected",
"version": "5.4.0"
},
{
"status": "affected",
"version": "5.4.1"
},
{
"status": "affected",
"version": "5.4.2"
},
{
"status": "affected",
"version": "5.7.0"
},
{
"status": "affected",
"version": "5.8.1"
},
{
"status": "affected",
"version": "5.7.1"
},
{
"status": "affected",
"version": "5.8.0"
},
{
"status": "affected",
"version": "5.5.2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-682",
"description": "Incorrect Calculation",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:10:43.211Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-snort3-ybgmhTQe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe"
}
],
"source": {
"advisory": "cisco-sa-hardening-snort3-ybgmhTQe",
"defects": [
"CSCwu17795"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Software Hardening Release: October 2026"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20236",
"datePublished": "2026-10-21T16:12:58.186Z",
"dateReserved": "2025-10-08T11:59:15.400Z",
"dateUpdated": "2026-10-22T19:10:43.211Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20221 (GCVE-0-2026-20221)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-476 - NULL Pointer Dereference
Summary
Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine.
This vulnerability is due to improper handling of nested GRE traffic. An attacker could exploit this vulnerability by sending a crafted GRE payload through an affected device. A successful exploit could allow the attacker to trigger an unexpected reload of the Snort 3 Detection Engine, resulting in either a bypass or denial of service (DoS) condition, depending on device configuration. For more information, see the section of this advisory. The Snort 3 Detection Engine will restart automatically. No manual intervention is required.
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Cyber Vision |
Version: 3.0.0 Version: 3.0.2 Version: 3.0.3 Version: 3.0.1 Version: 3.1.0 Version: 3.0.4 Version: 3.1.1 Version: 3.1.2 Version: 3.2.0 Version: 3.0.5 Version: 3.2.1 Version: 3.0.6 Version: 3.2.2 Version: 3.2.3 Version: 3.2.4 Version: 4.0.0 Version: 4.0.1 Version: 4.0.2 Version: 4.0.3 Version: 4.1.0 Version: 4.1.1 Version: 4.1.2 Version: 4.1.3 Version: 4.1.4 Version: 4.2.0 Version: 4.2.1 Version: 4.1.5 Version: 4.2.2 Version: 4.2.X Version: 4.2.3 Version: 4.2.4 Version: 4.2.6 Version: 4.1.6 Version: 4.3.0 Version: 4.3.1 Version: 4.3.2 Version: 4.3.3 Version: 4.4.0 Version: 4.4.1 Version: 4.4.2 Version: 4.4.3 Version: 4.1.7 Version: 5.0.0 Version: 5.0.1 Version: 5.0.2 Version: 5.1.0 Version: 5.1.1 Version: 5.1.2 Version: 5.1.3 Version: 5.2.0 Version: 5.2.1 Version: 5.3.0 Version: 5.3.1 Version: 5.3.2 Version: 5.3.3 Version: 5.5.1 Version: 5.6.1 Version: 5.6.0 Version: 5.4.0 Version: 5.4.1 Version: 5.4.2 |
||||||||||||||||||||||
|
||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20221",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-22T13:23:54.810399Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:55.375Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Cyber Vision",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.2.0"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.2.1"
},
{
"status": "affected",
"version": "3.0.6"
},
{
"status": "affected",
"version": "3.2.2"
},
{
"status": "affected",
"version": "3.2.3"
},
{
"status": "affected",
"version": "3.2.4"
},
{
"status": "affected",
"version": "4.0.0"
},
{
"status": "affected",
"version": "4.0.1"
},
{
"status": "affected",
"version": "4.0.2"
},
{
"status": "affected",
"version": "4.0.3"
},
{
"status": "affected",
"version": "4.1.0"
},
{
"status": "affected",
"version": "4.1.1"
},
{
"status": "affected",
"version": "4.1.2"
},
{
"status": "affected",
"version": "4.1.3"
},
{
"status": "affected",
"version": "4.1.4"
},
{
"status": "affected",
"version": "4.2.0"
},
{
"status": "affected",
"version": "4.2.1"
},
{
"status": "affected",
"version": "4.1.5"
},
{
"status": "affected",
"version": "4.2.2"
},
{
"status": "affected",
"version": "4.2.X"
},
{
"status": "affected",
"version": "4.2.3"
},
{
"status": "affected",
"version": "4.2.4"
},
{
"status": "affected",
"version": "4.2.6"
},
{
"status": "affected",
"version": "4.1.6"
},
{
"status": "affected",
"version": "4.3.0"
},
{
"status": "affected",
"version": "4.3.1"
},
{
"status": "affected",
"version": "4.3.2"
},
{
"status": "affected",
"version": "4.3.3"
},
{
"status": "affected",
"version": "4.4.0"
},
{
"status": "affected",
"version": "4.4.1"
},
{
"status": "affected",
"version": "4.4.2"
},
{
"status": "affected",
"version": "4.4.3"
},
{
"status": "affected",
"version": "4.1.7"
},
{
"status": "affected",
"version": "5.0.0"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "5.0.2"
},
{
"status": "affected",
"version": "5.1.0"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1.3"
},
{
"status": "affected",
"version": "5.2.0"
},
{
"status": "affected",
"version": "5.2.1"
},
{
"status": "affected",
"version": "5.3.0"
},
{
"status": "affected",
"version": "5.3.1"
},
{
"status": "affected",
"version": "5.3.2"
},
{
"status": "affected",
"version": "5.3.3"
},
{
"status": "affected",
"version": "5.5.1"
},
{
"status": "affected",
"version": "5.6.1"
},
{
"status": "affected",
"version": "5.6.0"
},
{
"status": "affected",
"version": "5.4.0"
},
{
"status": "affected",
"version": "5.4.1"
},
{
"status": "affected",
"version": "5.4.2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Umbrella Insights Virtual Appliance",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.6.0"
},
{
"status": "affected",
"version": "2.5.6"
},
{
"status": "affected",
"version": "2.5"
},
{
"status": "affected",
"version": "2.4.12"
},
{
"status": "affected",
"version": "2.7"
},
{
"status": "affected",
"version": "2.6.2"
},
{
"status": "affected",
"version": "2.5.5"
},
{
"status": "affected",
"version": "2.5.4"
},
{
"status": "affected",
"version": "2.8"
},
{
"status": "affected",
"version": "2.6.1"
},
{
"status": "affected",
"version": "2.5.7"
},
{
"status": "affected",
"version": "1.5.4"
},
{
"status": "affected",
"version": "1.5.5"
},
{
"status": "affected",
"version": "1.5.6"
},
{
"status": "affected",
"version": "2.0.0"
},
{
"status": "affected",
"version": "2.0.2"
},
{
"status": "affected",
"version": "2.0.3"
},
{
"status": "affected",
"version": "2.1.0"
},
{
"status": "affected",
"version": "2.1.2"
},
{
"status": "affected",
"version": "2.1.4"
},
{
"status": "affected",
"version": "2.1.5"
},
{
"status": "affected",
"version": "2.2"
},
{
"status": "affected",
"version": "2.2.1"
},
{
"status": "affected",
"version": "2.3"
},
{
"status": "affected",
"version": "2.3.1"
},
{
"status": "affected",
"version": "2.4"
},
{
"status": "affected",
"version": "2.4.4"
},
{
"status": "affected",
"version": "2.4.6"
},
{
"status": "affected",
"version": "2.8.9"
},
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "2.8.1"
},
{
"status": "affected",
"version": "2.8.2"
},
{
"status": "affected",
"version": "2.8.3"
},
{
"status": "affected",
"version": "2.8.4"
},
{
"status": "affected",
"version": "2.8.5"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.1.3"
},
{
"status": "affected",
"version": "3.1.4"
},
{
"status": "affected",
"version": "3.2.1"
},
{
"status": "affected",
"version": "3.2.2"
},
{
"status": "affected",
"version": "3.2.3"
},
{
"status": "affected",
"version": "3.3"
},
{
"status": "affected",
"version": "3.3.1"
},
{
"status": "affected",
"version": "3.3.2"
},
{
"status": "affected",
"version": "3.3.3"
},
{
"status": "affected",
"version": "3.3.4"
},
{
"status": "affected",
"version": "3.4"
},
{
"status": "affected",
"version": "3.4.1"
},
{
"status": "affected",
"version": "3.4.2"
},
{
"status": "affected",
"version": "3.4.3"
},
{
"status": "affected",
"version": "3.4.4"
},
{
"status": "affected",
"version": "3.4.5"
},
{
"status": "affected",
"version": "3.4.6"
},
{
"status": "affected",
"version": "3.5"
},
{
"status": "affected",
"version": "2.7.1"
},
{
"status": "affected",
"version": "2.7.2"
},
{
"status": "affected",
"version": "2.7.6"
},
{
"status": "affected",
"version": "2.7.9"
},
{
"status": "affected",
"version": "2.7.10"
},
{
"status": "affected",
"version": "3.5.1"
},
{
"status": "affected",
"version": "3.5.2"
},
{
"status": "affected",
"version": "3.6.1"
},
{
"status": "affected",
"version": "3.6.2"
},
{
"status": "affected",
"version": "3.7"
},
{
"status": "affected",
"version": "3.7.1"
},
{
"status": "affected",
"version": "3.8.3"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.17.1S"
},
{
"status": "affected",
"version": "16.12.3"
},
{
"status": "affected",
"version": "Fuji-16.9.5"
},
{
"status": "affected",
"version": "16.12.4"
},
{
"status": "affected",
"version": "17.3.1a"
},
{
"status": "affected",
"version": "16.6.6"
},
{
"status": "affected",
"version": "16.12.2"
},
{
"status": "affected",
"version": "Fuji-16.9.6"
},
{
"status": "affected",
"version": "3.17.0S"
},
{
"status": "affected",
"version": "Fuji-16.9.3"
},
{
"status": "affected",
"version": "Denali-16.3.7"
},
{
"status": "affected",
"version": "Fuji-16.9.2"
},
{
"status": "affected",
"version": "Fuji-16.9.4"
},
{
"status": "affected",
"version": "Everest-16.6.4"
},
{
"status": "affected",
"version": "Everest-16.6.3"
},
{
"status": "affected",
"version": "16.6.5"
},
{
"status": "affected",
"version": "Denali-16.3.5"
},
{
"status": "affected",
"version": "17.2.1r"
},
{
"status": "affected",
"version": "17.1.1"
},
{
"status": "affected",
"version": "Everest-16.6.2"
},
{
"status": "affected",
"version": "16.6.7a"
},
{
"status": "affected",
"version": "Denali-16.3.4"
},
{
"status": "affected",
"version": "16.6.1"
},
{
"status": "affected",
"version": "Denali-16.3.9"
},
{
"status": "affected",
"version": "Denali-16.3.3"
},
{
"status": "affected",
"version": "16.12.1a"
},
{
"status": "affected",
"version": "17.3.2"
},
{
"status": "affected",
"version": "17.4.1a"
},
{
"status": "affected",
"version": "16.12.5"
},
{
"status": "affected",
"version": "17.5.1"
},
{
"status": "affected",
"version": "Fuji-16.9.7"
},
{
"status": "affected",
"version": "16.6.9"
},
{
"status": "affected",
"version": "17.3.3"
},
{
"status": "affected",
"version": "17.5.1a"
},
{
"status": "affected",
"version": "17.3.4"
},
{
"status": "affected",
"version": "17.3.4a"
},
{
"status": "affected",
"version": "17.4.2"
},
{
"status": "affected",
"version": "17.4.1b"
},
{
"status": "affected",
"version": "17.6.1a"
},
{
"status": "affected",
"version": "16.6.10"
},
{
"status": "affected",
"version": "17.7.1a"
},
{
"status": "affected",
"version": "16.12.6"
},
{
"status": "affected",
"version": "Fuji-16.9.8"
},
{
"status": "affected",
"version": "17.6.2"
},
{
"status": "affected",
"version": "17.8.1a"
},
{
"status": "affected",
"version": "16.12.7"
},
{
"status": "affected",
"version": "17.3.5"
},
{
"status": "affected",
"version": "17.6.3"
},
{
"status": "affected",
"version": "17.6.3a"
},
{
"status": "affected",
"version": "17.7.2"
},
{
"status": "affected",
"version": "17.9.1a"
},
{
"status": "affected",
"version": "17.6.4"
},
{
"status": "affected",
"version": "17.10.1a"
},
{
"status": "affected",
"version": "17.3.6"
},
{
"status": "affected",
"version": "16.12.8"
},
{
"status": "affected",
"version": "17.3.7"
},
{
"status": "affected",
"version": "17.9.2a"
},
{
"status": "affected",
"version": "17.6.5"
},
{
"status": "affected",
"version": "17.11.1a"
},
{
"status": "affected",
"version": "17.9.3a"
},
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.9.4"
},
{
"status": "affected",
"version": "17.6.6"
},
{
"status": "affected",
"version": "17.3.8"
},
{
"status": "affected",
"version": "17.3.8a"
},
{
"status": "affected",
"version": "17.6.6a"
},
{
"status": "affected",
"version": "17.9.4a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.9.5a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.6.7"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.6.8"
},
{
"status": "affected",
"version": "17.9.6"
},
{
"status": "affected",
"version": "17.6.8a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.9.5e"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.9.5f"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.9.7a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.9.7b"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.9.8"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.9.9"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
},
{
"status": "affected",
"version": "17.9.10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine.\r\n\r\nThis vulnerability is due to improper handling of nested GRE traffic. An attacker could exploit this vulnerability by sending a crafted GRE payload through an affected device. A successful exploit could allow the attacker to trigger an unexpected reload of the Snort 3 Detection Engine, resulting in either a bypass or denial of service (DoS) condition, depending on device configuration. For more information, see the section of this advisory. The Snort 3 Detection Engine will restart automatically. No manual intervention is required."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "NULL Pointer Dereference",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:26.546Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-gre-JNpMHrTv",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gre-JNpMHrTv"
}
],
"source": {
"advisory": "cisco-sa-snort3-gre-JNpMHrTv",
"defects": [
"CSCwt66239"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20221",
"datePublished": "2026-10-21T16:12:53.435Z",
"dateReserved": "2025-10-08T11:59:15.398Z",
"dateUpdated": "2026-10-22T19:11:26.546Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20291 (GCVE-0-2026-20291)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 23:04
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-269 - Improper Privilege Management
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the Common Weakness Enumeration (CWE) Base CWE-269.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Cyber Vision |
Version: 3.0.0 Version: 3.0.2 Version: 3.0.3 Version: 3.0.1 Version: 3.1.0 Version: 3.0.4 Version: 3.1.1 Version: 3.1.2 Version: 3.2.0 Version: 3.0.5 Version: 3.2.1 Version: 3.0.6 Version: 3.2.2 Version: 3.2.3 Version: 3.2.4 Version: 4.0.0 Version: 4.0.1 Version: 4.0.2 Version: 4.0.3 Version: 4.1.0 Version: 4.1.1 Version: 4.1.2 Version: 4.1.3 Version: 4.1.4 Version: 4.2.0 Version: 4.2.1 Version: 4.1.5 Version: 4.2.2 Version: 4.2.X Version: 4.2.3 Version: 4.2.4 Version: 4.2.6 Version: 4.1.6 Version: 4.3.0 Version: 4.3.1 Version: 4.3.2 Version: 4.3.3 Version: 4.4.0 Version: 4.4.1 Version: 4.4.2 Version: 4.4.3 Version: 4.1.7 Version: 5.0.0 Version: 5.0.1 Version: 5.0.2 Version: 5.1.0 Version: 5.1.1 Version: 5.1.2 Version: 5.1.3 Version: 5.2.0 Version: 5.2.1 Version: 5.3.0 Version: 5.3.1 Version: 5.3.2 Version: 5.3.3 Version: 5.5.1 Version: 5.6.1 Version: 5.4.0 Version: 5.4.1 Version: 5.4.2 Version: 5.7.0 Version: 5.8.1 Version: 5.7.1 Version: 5.8.0 Version: 5.5.2 |
|||||||||||||||||
|
|||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20291",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:46.063Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Cyber Vision",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.2.0"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.2.1"
},
{
"status": "affected",
"version": "3.0.6"
},
{
"status": "affected",
"version": "3.2.2"
},
{
"status": "affected",
"version": "3.2.3"
},
{
"status": "affected",
"version": "3.2.4"
},
{
"status": "affected",
"version": "4.0.0"
},
{
"status": "affected",
"version": "4.0.1"
},
{
"status": "affected",
"version": "4.0.2"
},
{
"status": "affected",
"version": "4.0.3"
},
{
"status": "affected",
"version": "4.1.0"
},
{
"status": "affected",
"version": "4.1.1"
},
{
"status": "affected",
"version": "4.1.2"
},
{
"status": "affected",
"version": "4.1.3"
},
{
"status": "affected",
"version": "4.1.4"
},
{
"status": "affected",
"version": "4.2.0"
},
{
"status": "affected",
"version": "4.2.1"
},
{
"status": "affected",
"version": "4.1.5"
},
{
"status": "affected",
"version": "4.2.2"
},
{
"status": "affected",
"version": "4.2.X"
},
{
"status": "affected",
"version": "4.2.3"
},
{
"status": "affected",
"version": "4.2.4"
},
{
"status": "affected",
"version": "4.2.6"
},
{
"status": "affected",
"version": "4.1.6"
},
{
"status": "affected",
"version": "4.3.0"
},
{
"status": "affected",
"version": "4.3.1"
},
{
"status": "affected",
"version": "4.3.2"
},
{
"status": "affected",
"version": "4.3.3"
},
{
"status": "affected",
"version": "4.4.0"
},
{
"status": "affected",
"version": "4.4.1"
},
{
"status": "affected",
"version": "4.4.2"
},
{
"status": "affected",
"version": "4.4.3"
},
{
"status": "affected",
"version": "4.1.7"
},
{
"status": "affected",
"version": "5.0.0"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "5.0.2"
},
{
"status": "affected",
"version": "5.1.0"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1.3"
},
{
"status": "affected",
"version": "5.2.0"
},
{
"status": "affected",
"version": "5.2.1"
},
{
"status": "affected",
"version": "5.3.0"
},
{
"status": "affected",
"version": "5.3.1"
},
{
"status": "affected",
"version": "5.3.2"
},
{
"status": "affected",
"version": "5.3.3"
},
{
"status": "affected",
"version": "5.5.1"
},
{
"status": "affected",
"version": "5.6.1"
},
{
"status": "affected",
"version": "5.4.0"
},
{
"status": "affected",
"version": "5.4.1"
},
{
"status": "affected",
"version": "5.4.2"
},
{
"status": "affected",
"version": "5.7.0"
},
{
"status": "affected",
"version": "5.8.1"
},
{
"status": "affected",
"version": "5.7.1"
},
{
"status": "affected",
"version": "5.8.0"
},
{
"status": "affected",
"version": "5.5.2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the Common Weakness Enumeration (CWE) Base CWE-269."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "Improper Privilege Management",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:03.079Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-snort3-ybgmhTQe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe"
}
],
"source": {
"advisory": "cisco-sa-hardening-snort3-ybgmhTQe",
"defects": [
"CSCwu22792"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Software Hardening Release: October 2026"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20291",
"datePublished": "2026-10-21T16:12:53.383Z",
"dateReserved": "2025-10-08T11:59:15.405Z",
"dateUpdated": "2026-10-22T23:04:46.063Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20197 (GCVE-0-2026-20197)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete error checking when Snort 3 parses Teredo packets. An attacker could exploit this vulnerability by sending a crafted Teredo packet to a targeted device to be parsed by Snort. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Version: 3.12.2.0 Version: 3.1.2.0 Version: 3.1.3.0 Version: 3.1.4.0 Version: 3.1.5.0 Version: 3.1.6.0 Version: 3.1.7.0 Version: 3.1.8.0 Version: 3.1.9.0 Version: 3.1.10.0 Version: 3.1.12.0 Version: 3.1.13.0 Version: 3.1.14.0 Version: 3.1.15.0 Version: 3.1.16.0 Version: 3.1.17.0 Version: 3.1.18.0 Version: 3.1.19.0 Version: 3.1.20.0 Version: 3.1.21.0 Version: 3.1.22.0 Version: 3.1.23.0 Version: 3.1.24.0 Version: 3.1.25.0 Version: 3.1.27.0 Version: 3.1.28.0 Version: 3.1.29.0 Version: 3.1.30.0 Version: 3.1.31.0 Version: 3.1.32.0 Version: 3.1.36.0 Version: 3.1.38.0 Version: 3.1.39.0 Version: 3.1.40.0 Version: 3.1.41.0 Version: 3.1.42.0 Version: 3.1.43.0 Version: 3.1.45.0 Version: 3.1.47.0 Version: 3.1.48.0 Version: 3.1.50.0 Version: 3.1.51.0 Version: 3.1.52.0 Version: 3.1.53.0 Version: 3.1.55.0 Version: 3.1.56.0 Version: 3.1.57.0 Version: 3.1.58.0 Version: 3.1.59.0 Version: 3.1.60.0 Version: 3.1.61.0 Version: 3.1.62.0 Version: 3.1.63.0 Version: 3.1.64.0 Version: 3.1.65.0 Version: 3.1.66.0 Version: 3.1.67.0 Version: 3.1.69.0 Version: 3.1.70.0 Version: 3.1.71.0 Version: 3.1.72.0 Version: 3.1.73.0 Version: 3.1.74.0 Version: 3.1.75.0 Version: 3.1.76.0 Version: 3.1.77.0 Version: 3.1.78.0 Version: 3.1.81.0 Version: 3.1.82.0 Version: 3.1.83.0 Version: 3.1.84.0 Version: 3.2.1.0 Version: 3.2.2.0 Version: 3.3.0.0 Version: 3.3.1.0 Version: 3.3.2.0 Version: 3.3.3.0 Version: 3.3.4.0 Version: 3.3.5.0 Version: 3.3.7.0 Version: 3.5.0.0 Version: 3.5.1.0 Version: 3.8.1.0 Version: 3.6.0.0 Version: 3.6.2.0 Version: 3.9.3.0 Version: 3.7.2.0 Version: 3.7.0.0 Version: 3.9.6.0 Version: 3.10.0.0 Version: 3.10.2.0 Version: 3.7.4.0 Version: 3.9.0.0 Version: 3.5.2.0 Version: 3.12.1.0 Version: 3.6.1.0 Version: 3.9.2.0 Version: 3.6.3.0 Version: 3.9.5.0 Version: 3.7.1.0 Version: 3.9.7.0 Version: 3.7.3.0 Version: 3.10.1.0 Version: 3.9.1.0 Version: 3.11.1.0 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20197",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:20:53.349854Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:55.683Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to incomplete error checking when Snort 3 parses Teredo packets. An attacker could exploit this vulnerability by sending a crafted Teredo packet to a targeted device to be parsed by Snort. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:21.691Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-misc-dos-6mB22qAK",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-misc-dos-6mB22qAK"
}
],
"source": {
"advisory": "cisco-sa-snort3-misc-dos-6mB22qAK",
"defects": [
"CSCwu51451"
],
"discovery": "EXTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20197",
"datePublished": "2026-10-21T16:12:40.477Z",
"dateReserved": "2025-10-08T11:59:15.396Z",
"dateUpdated": "2026-10-22T19:11:21.691Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20218 (GCVE-0-2026-20218)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-121 - Stack-based Buffer Overflow
Summary
A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to improper range checking when Snort 3 decompresses VBA data, which is user controlled. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine of a targeted device. A successful exploit could allow the attacker to cause an overflow of stack data, which could result in a DoS condition.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Version: 3.12.2.0 Version: 3.1.2.0 Version: 3.1.3.0 Version: 3.1.4.0 Version: 3.1.5.0 Version: 3.1.6.0 Version: 3.1.7.0 Version: 3.1.8.0 Version: 3.1.9.0 Version: 3.1.10.0 Version: 3.1.12.0 Version: 3.1.13.0 Version: 3.1.14.0 Version: 3.1.15.0 Version: 3.1.16.0 Version: 3.1.17.0 Version: 3.1.18.0 Version: 3.1.19.0 Version: 3.1.20.0 Version: 3.1.21.0 Version: 3.1.22.0 Version: 3.1.23.0 Version: 3.1.24.0 Version: 3.1.25.0 Version: 3.1.27.0 Version: 3.1.28.0 Version: 3.1.29.0 Version: 3.1.30.0 Version: 3.1.31.0 Version: 3.1.32.0 Version: 3.1.36.0 Version: 3.1.38.0 Version: 3.1.39.0 Version: 3.1.40.0 Version: 3.1.41.0 Version: 3.1.42.0 Version: 3.1.43.0 Version: 3.1.45.0 Version: 3.1.47.0 Version: 3.1.48.0 Version: 3.1.50.0 Version: 3.1.51.0 Version: 3.1.52.0 Version: 3.1.53.0 Version: 3.1.55.0 Version: 3.1.56.0 Version: 3.1.57.0 Version: 3.1.58.0 Version: 3.1.59.0 Version: 3.1.60.0 Version: 3.1.61.0 Version: 3.1.62.0 Version: 3.1.63.0 Version: 3.1.64.0 Version: 3.1.65.0 Version: 3.1.66.0 Version: 3.1.67.0 Version: 3.1.69.0 Version: 3.1.70.0 Version: 3.1.71.0 Version: 3.1.72.0 Version: 3.1.73.0 Version: 3.1.74.0 Version: 3.1.75.0 Version: 3.1.76.0 Version: 3.1.77.0 Version: 3.1.78.0 Version: 3.1.81.0 Version: 3.1.82.0 Version: 3.1.83.0 Version: 3.1.84.0 Version: 3.2.1.0 Version: 3.2.2.0 Version: 3.3.0.0 Version: 3.3.1.0 Version: 3.3.2.0 Version: 3.3.3.0 Version: 3.3.4.0 Version: 3.3.5.0 Version: 3.3.7.0 Version: 3.5.0.0 Version: 3.5.1.0 Version: 3.8.1.0 Version: 3.6.0.0 Version: 3.6.2.0 Version: 3.9.3.0 Version: 3.7.2.0 Version: 3.7.0.0 Version: 3.9.6.0 Version: 3.10.0.0 Version: 3.10.2.0 Version: 3.7.4.0 Version: 3.9.0.0 Version: 3.5.2.0 Version: 3.12.1.0 Version: 3.6.1.0 Version: 3.9.2.0 Version: 3.6.3.0 Version: 3.9.5.0 Version: 3.7.1.0 Version: 3.9.7.0 Version: 3.7.3.0 Version: 3.10.1.0 Version: 3.9.1.0 Version: 3.11.1.0 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20218",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:17:50.554759Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:55.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition.\u0026nbsp;\u0026nbsp;\r\n\r\nThis vulnerability is due to improper range checking when Snort 3 decompresses VBA data, which is user controlled. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine of a targeted device. A successful exploit could allow the attacker to cause an overflow of stack data, which could result in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "Stack-based Buffer Overflow",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:10.095Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-vba-bufdos-jAuFdvn9",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-vba-bufdos-jAuFdvn9"
}
],
"source": {
"advisory": "cisco-sa-snort3-vba-bufdos-jAuFdvn9",
"defects": [
"CSCwv01924"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20218",
"datePublished": "2026-10-21T16:12:38.494Z",
"dateReserved": "2025-10-08T11:59:15.398Z",
"dateUpdated": "2026-10-22T19:11:10.095Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20179 (GCVE-0-2026-20179)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-128 - Wrap-around Error
Summary
Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete error checking when Snort 3 parses GRE packets. An attacker could exploit this vulnerability by sending a crafted GRE packet to a targeted device to be parsed by Snort. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Version: 3.12.2.0 Version: 3.1.2.0 Version: 3.1.3.0 Version: 3.1.4.0 Version: 3.1.5.0 Version: 3.1.6.0 Version: 3.1.7.0 Version: 3.1.8.0 Version: 3.1.9.0 Version: 3.1.10.0 Version: 3.1.12.0 Version: 3.1.13.0 Version: 3.1.14.0 Version: 3.1.15.0 Version: 3.1.16.0 Version: 3.1.17.0 Version: 3.1.18.0 Version: 3.1.19.0 Version: 3.1.20.0 Version: 3.1.21.0 Version: 3.1.22.0 Version: 3.1.23.0 Version: 3.1.24.0 Version: 3.1.25.0 Version: 3.1.27.0 Version: 3.1.28.0 Version: 3.1.29.0 Version: 3.1.30.0 Version: 3.1.31.0 Version: 3.1.32.0 Version: 3.1.36.0 Version: 3.1.38.0 Version: 3.1.39.0 Version: 3.1.40.0 Version: 3.1.41.0 Version: 3.1.42.0 Version: 3.1.43.0 Version: 3.1.45.0 Version: 3.1.47.0 Version: 3.1.48.0 Version: 3.1.50.0 Version: 3.1.51.0 Version: 3.1.52.0 Version: 3.1.53.0 Version: 3.1.55.0 Version: 3.1.56.0 Version: 3.1.57.0 Version: 3.1.58.0 Version: 3.1.59.0 Version: 3.1.60.0 Version: 3.1.61.0 Version: 3.1.62.0 Version: 3.1.63.0 Version: 3.1.64.0 Version: 3.1.65.0 Version: 3.1.66.0 Version: 3.1.67.0 Version: 3.1.69.0 Version: 3.1.70.0 Version: 3.1.71.0 Version: 3.1.72.0 Version: 3.1.73.0 Version: 3.1.74.0 Version: 3.1.75.0 Version: 3.1.76.0 Version: 3.1.77.0 Version: 3.1.78.0 Version: 3.1.81.0 Version: 3.1.82.0 Version: 3.1.83.0 Version: 3.1.84.0 Version: 3.2.1.0 Version: 3.2.2.0 Version: 3.3.0.0 Version: 3.3.1.0 Version: 3.3.2.0 Version: 3.3.3.0 Version: 3.3.4.0 Version: 3.3.5.0 Version: 3.3.7.0 Version: 3.5.0.0 Version: 3.5.1.0 Version: 3.8.1.0 Version: 3.6.0.0 Version: 3.6.2.0 Version: 3.9.3.0 Version: 3.7.2.0 Version: 3.7.0.0 Version: 3.9.6.0 Version: 3.10.0.0 Version: 3.10.2.0 Version: 3.7.4.0 Version: 3.9.0.0 Version: 3.5.2.0 Version: 3.12.1.0 Version: 3.6.1.0 Version: 3.9.2.0 Version: 3.6.3.0 Version: 3.9.5.0 Version: 3.7.1.0 Version: 3.9.7.0 Version: 3.7.3.0 Version: 3.10.1.0 Version: 3.9.1.0 Version: 3.11.1.0 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20179",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:21:03.985190Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:55.981Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to incomplete error checking when Snort 3 parses GRE packets. An attacker could exploit this vulnerability by sending a crafted GRE packet to a targeted device to be parsed by Snort. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-128",
"description": "Wrap-around Error",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:03.271Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-misc-dos-6mB22qAK",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-misc-dos-6mB22qAK"
}
],
"source": {
"advisory": "cisco-sa-snort3-misc-dos-6mB22qAK",
"defects": [
"CSCwu51449"
],
"discovery": "EXTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20179",
"datePublished": "2026-10-21T16:12:29.897Z",
"dateReserved": "2025-10-08T11:59:15.393Z",
"dateUpdated": "2026-10-22T19:11:03.271Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20043 (GCVE-0-2026-20043)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 23:04
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20043 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Cyber Vision |
Version: 3.0.0 Version: 3.0.2 Version: 3.0.3 Version: 3.0.1 Version: 3.1.0 Version: 3.0.4 Version: 3.1.1 Version: 3.1.2 Version: 3.2.0 Version: 3.0.5 Version: 3.2.1 Version: 3.0.6 Version: 3.2.2 Version: 3.2.3 Version: 3.2.4 Version: 4.0.0 Version: 4.0.1 Version: 4.0.2 Version: 4.0.3 Version: 4.1.0 Version: 4.1.1 Version: 4.1.2 Version: 4.1.3 Version: 4.1.4 Version: 4.2.0 Version: 4.2.1 Version: 4.1.5 Version: 4.2.2 Version: 4.2.X Version: 4.2.3 Version: 4.2.4 Version: 4.2.6 Version: 4.1.6 Version: 4.3.0 Version: 4.3.1 Version: 4.3.2 Version: 4.3.3 Version: 4.4.0 Version: 4.4.1 Version: 4.4.2 Version: 4.4.3 Version: 4.1.7 Version: 5.0.0 Version: 5.0.1 Version: 5.0.2 Version: 5.1.0 Version: 5.1.1 Version: 5.1.2 Version: 5.1.3 Version: 5.2.0 Version: 5.2.1 Version: 5.3.0 Version: 5.3.1 Version: 5.3.2 Version: 5.3.3 Version: 5.5.1 Version: 5.6.1 Version: 5.4.0 Version: 5.4.1 Version: 5.4.2 Version: 5.7.0 Version: 5.8.1 Version: 5.7.1 Version: 5.8.0 Version: 5.5.2 |
|||||||||||||||||
|
|||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20043",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:45.240Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Cyber Vision",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.2.0"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.2.1"
},
{
"status": "affected",
"version": "3.0.6"
},
{
"status": "affected",
"version": "3.2.2"
},
{
"status": "affected",
"version": "3.2.3"
},
{
"status": "affected",
"version": "3.2.4"
},
{
"status": "affected",
"version": "4.0.0"
},
{
"status": "affected",
"version": "4.0.1"
},
{
"status": "affected",
"version": "4.0.2"
},
{
"status": "affected",
"version": "4.0.3"
},
{
"status": "affected",
"version": "4.1.0"
},
{
"status": "affected",
"version": "4.1.1"
},
{
"status": "affected",
"version": "4.1.2"
},
{
"status": "affected",
"version": "4.1.3"
},
{
"status": "affected",
"version": "4.1.4"
},
{
"status": "affected",
"version": "4.2.0"
},
{
"status": "affected",
"version": "4.2.1"
},
{
"status": "affected",
"version": "4.1.5"
},
{
"status": "affected",
"version": "4.2.2"
},
{
"status": "affected",
"version": "4.2.X"
},
{
"status": "affected",
"version": "4.2.3"
},
{
"status": "affected",
"version": "4.2.4"
},
{
"status": "affected",
"version": "4.2.6"
},
{
"status": "affected",
"version": "4.1.6"
},
{
"status": "affected",
"version": "4.3.0"
},
{
"status": "affected",
"version": "4.3.1"
},
{
"status": "affected",
"version": "4.3.2"
},
{
"status": "affected",
"version": "4.3.3"
},
{
"status": "affected",
"version": "4.4.0"
},
{
"status": "affected",
"version": "4.4.1"
},
{
"status": "affected",
"version": "4.4.2"
},
{
"status": "affected",
"version": "4.4.3"
},
{
"status": "affected",
"version": "4.1.7"
},
{
"status": "affected",
"version": "5.0.0"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "5.0.2"
},
{
"status": "affected",
"version": "5.1.0"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1.3"
},
{
"status": "affected",
"version": "5.2.0"
},
{
"status": "affected",
"version": "5.2.1"
},
{
"status": "affected",
"version": "5.3.0"
},
{
"status": "affected",
"version": "5.3.1"
},
{
"status": "affected",
"version": "5.3.2"
},
{
"status": "affected",
"version": "5.3.3"
},
{
"status": "affected",
"version": "5.5.1"
},
{
"status": "affected",
"version": "5.6.1"
},
{
"status": "affected",
"version": "5.4.0"
},
{
"status": "affected",
"version": "5.4.1"
},
{
"status": "affected",
"version": "5.4.2"
},
{
"status": "affected",
"version": "5.7.0"
},
{
"status": "affected",
"version": "5.8.1"
},
{
"status": "affected",
"version": "5.7.1"
},
{
"status": "affected",
"version": "5.8.0"
},
{
"status": "affected",
"version": "5.5.2"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.3.1a"
},
{
"status": "affected",
"version": "17.3.2"
},
{
"status": "affected",
"version": "17.4.1a"
},
{
"status": "affected",
"version": "17.5.1"
},
{
"status": "affected",
"version": "17.3.3"
},
{
"status": "affected",
"version": "17.5.1a"
},
{
"status": "affected",
"version": "17.3.4"
},
{
"status": "affected",
"version": "17.3.4a"
},
{
"status": "affected",
"version": "17.4.2"
},
{
"status": "affected",
"version": "17.4.1b"
},
{
"status": "affected",
"version": "17.6.1a"
},
{
"status": "affected",
"version": "17.7.1a"
},
{
"status": "affected",
"version": "17.6.2"
},
{
"status": "affected",
"version": "17.8.1a"
},
{
"status": "affected",
"version": "17.3.5"
},
{
"status": "affected",
"version": "17.6.3"
},
{
"status": "affected",
"version": "17.6.3a"
},
{
"status": "affected",
"version": "17.7.2"
},
{
"status": "affected",
"version": "17.9.1a"
},
{
"status": "affected",
"version": "17.6.4"
},
{
"status": "affected",
"version": "17.10.1a"
},
{
"status": "affected",
"version": "17.3.6"
},
{
"status": "affected",
"version": "17.3.7"
},
{
"status": "affected",
"version": "17.9.2a"
},
{
"status": "affected",
"version": "17.6.5"
},
{
"status": "affected",
"version": "17.11.1a"
},
{
"status": "affected",
"version": "17.9.3a"
},
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.9.4"
},
{
"status": "affected",
"version": "17.6.6"
},
{
"status": "affected",
"version": "17.3.8"
},
{
"status": "affected",
"version": "17.3.8a"
},
{
"status": "affected",
"version": "17.6.6a"
},
{
"status": "affected",
"version": "17.9.4a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.9.5a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.6.7"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.6.8"
},
{
"status": "affected",
"version": "17.9.6"
},
{
"status": "affected",
"version": "17.6.8a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.9.5e"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.9.5f"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.9.7a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.9.7b"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.9.8"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.9.9"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
},
{
"status": "affected",
"version": "17.9.10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20043 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:10:39.145Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-snort3-ybgmhTQe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe"
}
],
"source": {
"advisory": "cisco-sa-hardening-snort3-ybgmhTQe",
"defects": [
"CSCwu17797"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Software Hardening Release: October 2026"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20043",
"datePublished": "2026-10-21T16:12:29.730Z",
"dateReserved": "2025-10-08T11:59:15.354Z",
"dateUpdated": "2026-10-22T23:04:45.240Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20019 (GCVE-0-2026-20019)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 19:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Summary
Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete error checking when Snort 3 parses UDP Netflow Protocol packets. An attacker could exploit this vulnerability by sending a single crafted Netflow packet through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Version: 3.12.2.0 Version: 3.1.2.0 Version: 3.1.3.0 Version: 3.1.4.0 Version: 3.1.5.0 Version: 3.1.6.0 Version: 3.1.7.0 Version: 3.1.8.0 Version: 3.1.9.0 Version: 3.1.10.0 Version: 3.1.12.0 Version: 3.1.13.0 Version: 3.1.14.0 Version: 3.1.15.0 Version: 3.1.16.0 Version: 3.1.17.0 Version: 3.1.18.0 Version: 3.1.19.0 Version: 3.1.20.0 Version: 3.1.21.0 Version: 3.1.22.0 Version: 3.1.23.0 Version: 3.1.24.0 Version: 3.1.25.0 Version: 3.1.27.0 Version: 3.1.28.0 Version: 3.1.29.0 Version: 3.1.30.0 Version: 3.1.31.0 Version: 3.1.32.0 Version: 3.1.36.0 Version: 3.1.38.0 Version: 3.1.39.0 Version: 3.1.40.0 Version: 3.1.41.0 Version: 3.1.42.0 Version: 3.1.43.0 Version: 3.1.45.0 Version: 3.1.47.0 Version: 3.1.48.0 Version: 3.1.50.0 Version: 3.1.51.0 Version: 3.1.52.0 Version: 3.1.53.0 Version: 3.1.55.0 Version: 3.1.56.0 Version: 3.1.57.0 Version: 3.1.58.0 Version: 3.1.59.0 Version: 3.1.60.0 Version: 3.1.61.0 Version: 3.1.62.0 Version: 3.1.63.0 Version: 3.1.64.0 Version: 3.1.65.0 Version: 3.1.66.0 Version: 3.1.67.0 Version: 3.1.69.0 Version: 3.1.70.0 Version: 3.1.71.0 Version: 3.1.72.0 Version: 3.1.73.0 Version: 3.1.74.0 Version: 3.1.75.0 Version: 3.1.76.0 Version: 3.1.77.0 Version: 3.1.78.0 Version: 3.1.81.0 Version: 3.1.82.0 Version: 3.1.83.0 Version: 3.1.84.0 Version: 3.2.1.0 Version: 3.2.2.0 Version: 3.3.0.0 Version: 3.3.1.0 Version: 3.3.2.0 Version: 3.3.3.0 Version: 3.3.4.0 Version: 3.3.5.0 Version: 3.3.7.0 Version: 3.5.0.0 Version: 3.5.1.0 Version: 3.8.1.0 Version: 3.6.0.0 Version: 3.6.2.0 Version: 3.9.3.0 Version: 3.7.2.0 Version: 3.7.0.0 Version: 3.9.6.0 Version: 3.10.0.0 Version: 3.10.2.0 Version: 3.7.4.0 Version: 3.9.0.0 Version: 3.5.2.0 Version: 3.12.1.0 Version: 3.6.1.0 Version: 3.9.2.0 Version: 3.6.3.0 Version: 3.9.5.0 Version: 3.7.1.0 Version: 3.9.7.0 Version: 3.7.3.0 Version: 3.10.1.0 Version: 3.9.1.0 Version: 3.11.1.0 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20019",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:21:33.221574Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:56.280Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to incomplete error checking when Snort 3 parses UDP Netflow Protocol packets. An attacker could exploit this vulnerability by sending a single crafted Netflow packet through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-835",
"description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:10:53.022Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-misc-dos-6mB22qAK",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-misc-dos-6mB22qAK"
}
],
"source": {
"advisory": "cisco-sa-snort3-misc-dos-6mB22qAK",
"defects": [
"CSCwu23999"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20019",
"datePublished": "2026-10-21T16:12:20.285Z",
"dateReserved": "2025-10-08T11:59:15.351Z",
"dateUpdated": "2026-10-22T19:10:53.022Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20011 (GCVE-0-2026-20011)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-22 19:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-805 - Buffer Access with Incorrect Length Value
Summary
Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart.
This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed. An attacker could exploit this vulnerability by sending crafted SMTP packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Version: 3.1.2.0 Version: 3.1.3.0 Version: 3.1.4.0 Version: 3.1.5.0 Version: 3.1.6.0 Version: 3.1.7.0 Version: 3.1.8.0 Version: 3.1.9.0 Version: 3.1.10.0 Version: 3.1.12.0 Version: 3.1.13.0 Version: 3.1.14.0 Version: 3.1.15.0 Version: 3.1.16.0 Version: 3.1.17.0 Version: 3.1.18.0 Version: 3.1.19.0 Version: 3.1.20.0 Version: 3.1.21.0 Version: 3.1.22.0 Version: 3.1.23.0 Version: 3.1.24.0 Version: 3.1.25.0 Version: 3.1.27.0 Version: 3.1.28.0 Version: 3.1.29.0 Version: 3.1.30.0 Version: 3.1.31.0 Version: 3.1.32.0 Version: 3.1.36.0 Version: 3.1.38.0 Version: 3.1.39.0 Version: 3.1.40.0 Version: 3.1.41.0 Version: 3.1.42.0 Version: 3.1.43.0 Version: 3.1.45.0 Version: 3.1.47.0 Version: 3.1.48.0 Version: 3.1.50.0 Version: 3.1.51.0 Version: 3.1.52.0 Version: 3.1.53.0 Version: 3.1.55.0 Version: 3.1.56.0 Version: 3.1.57.0 Version: 3.1.58.0 Version: 3.1.59.0 Version: 3.1.60.0 Version: 3.1.61.0 Version: 3.1.62.0 Version: 3.1.63.0 Version: 3.1.64.0 Version: 3.1.65.0 Version: 3.1.66.0 Version: 3.1.67.0 Version: 3.1.69.0 Version: 3.1.70.0 Version: 3.1.71.0 Version: 3.1.72.0 Version: 3.1.73.0 Version: 3.1.74.0 Version: 3.1.75.0 Version: 3.1.76.0 Version: 3.1.77.0 Version: 3.1.78.0 Version: 3.1.81.0 Version: 3.1.82.0 Version: 3.1.83.0 Version: 3.1.84.0 Version: 3.2.1.0 Version: 3.2.2.0 Version: 3.3.0.0 Version: 3.3.1.0 Version: 3.3.2.0 Version: 3.3.3.0 Version: 3.3.4.0 Version: 3.3.5.0 Version: 3.3.7.0 Version: 3.5.0.0 Version: 3.5.1.0 Version: 3.8.1.0 Version: 3.6.0.0 Version: 3.6.2.0 Version: 3.9.3.0 Version: 3.7.2.0 Version: 3.7.0.0 Version: 3.9.6.0 Version: 3.10.0.0 Version: 3.7.4.0 Version: 3.9.0.0 Version: 3.5.2.0 Version: 3.6.1.0 Version: 3.9.2.0 Version: 3.6.3.0 Version: 3.9.5.0 Version: 3.7.1.0 Version: 3.9.7.0 Version: 3.7.3.0 Version: 3.9.1.0 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20011",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:21:13.598133Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:56.428Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.9.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.17.1S"
},
{
"status": "affected",
"version": "16.12.3"
},
{
"status": "affected",
"version": "Fuji-16.9.5"
},
{
"status": "affected",
"version": "16.12.4"
},
{
"status": "affected",
"version": "17.3.1a"
},
{
"status": "affected",
"version": "16.6.6"
},
{
"status": "affected",
"version": "16.12.2"
},
{
"status": "affected",
"version": "Fuji-16.9.6"
},
{
"status": "affected",
"version": "3.17.0S"
},
{
"status": "affected",
"version": "Fuji-16.9.3"
},
{
"status": "affected",
"version": "Denali-16.3.7"
},
{
"status": "affected",
"version": "Fuji-16.9.2"
},
{
"status": "affected",
"version": "Fuji-16.9.4"
},
{
"status": "affected",
"version": "Everest-16.6.4"
},
{
"status": "affected",
"version": "Everest-16.6.3"
},
{
"status": "affected",
"version": "16.6.5"
},
{
"status": "affected",
"version": "Denali-16.3.5"
},
{
"status": "affected",
"version": "17.2.1r"
},
{
"status": "affected",
"version": "17.1.1"
},
{
"status": "affected",
"version": "Everest-16.6.2"
},
{
"status": "affected",
"version": "16.6.7a"
},
{
"status": "affected",
"version": "Denali-16.3.4"
},
{
"status": "affected",
"version": "16.6.1"
},
{
"status": "affected",
"version": "Denali-16.3.9"
},
{
"status": "affected",
"version": "Denali-16.3.3"
},
{
"status": "affected",
"version": "16.12.1a"
},
{
"status": "affected",
"version": "17.3.2"
},
{
"status": "affected",
"version": "17.4.1a"
},
{
"status": "affected",
"version": "16.12.5"
},
{
"status": "affected",
"version": "Fuji-16.9.7"
},
{
"status": "affected",
"version": "16.6.9"
},
{
"status": "affected",
"version": "17.3.3"
},
{
"status": "affected",
"version": "17.5.1a"
},
{
"status": "affected",
"version": "17.3.4a"
},
{
"status": "affected",
"version": "17.4.2"
},
{
"status": "affected",
"version": "17.4.1b"
},
{
"status": "affected",
"version": "17.6.1a"
},
{
"status": "affected",
"version": "16.6.10"
},
{
"status": "affected",
"version": "17.7.1a"
},
{
"status": "affected",
"version": "16.12.6"
},
{
"status": "affected",
"version": "Fuji-16.9.8"
},
{
"status": "affected",
"version": "17.6.2"
},
{
"status": "affected",
"version": "17.8.1a"
},
{
"status": "affected",
"version": "16.12.7"
},
{
"status": "affected",
"version": "17.3.5"
},
{
"status": "affected",
"version": "17.6.3a"
},
{
"status": "affected",
"version": "17.7.2"
},
{
"status": "affected",
"version": "17.9.1a"
},
{
"status": "affected",
"version": "17.6.4"
},
{
"status": "affected",
"version": "17.10.1a"
},
{
"status": "affected",
"version": "17.3.6"
},
{
"status": "affected",
"version": "16.12.8"
},
{
"status": "affected",
"version": "17.3.7"
},
{
"status": "affected",
"version": "17.9.2a"
},
{
"status": "affected",
"version": "17.6.5"
},
{
"status": "affected",
"version": "17.11.1a"
},
{
"status": "affected",
"version": "17.9.3a"
},
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.9.4"
},
{
"status": "affected",
"version": "17.6.6"
},
{
"status": "affected",
"version": "17.3.8"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.9.5a"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.6.7"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.9.6"
},
{
"status": "affected",
"version": "17.6.8a"
},
{
"status": "affected",
"version": "17.16.1a"
},
{
"status": "affected",
"version": "17.9.5e"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.9.5f"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.17.1"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.9.7a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.9.7b"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.9.8"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "26.1.1"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.9.9"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
},
{
"status": "affected",
"version": "26.1.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart.\r\n\r\nThis vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed. An attacker could exploit this vulnerability by sending crafted SMTP packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-805",
"description": "Buffer Access with Incorrect Length Value",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:17.797Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-mime-vulns-bkXjcKkt",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-mime-vulns-bkXjcKkt"
}
],
"source": {
"advisory": "cisco-sa-snort3-mime-vulns-bkXjcKkt",
"defects": [
"CSCws62055"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20011",
"datePublished": "2026-10-21T16:12:19.429Z",
"dateReserved": "2025-10-08T11:59:15.350Z",
"dateUpdated": "2026-10-22T19:11:17.797Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20121 (GCVE-0-2026-20121)
Vulnerability from cvelistv5
Published
2026-09-16 20:24
Modified
2026-09-18 19:08
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-284 - Improper Access Control
Summary
A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access controls.
This vulnerability is due to a logic error in populating group access control policies (ACPs) with OGS configured. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.23.1 Version: 9.22.1.1 Version: 9.22.1.3 Version: 9.22.1.2 Version: 9.22.1.6 Version: 9.22.2 Version: 9.23.1.3 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.22.2.13 Version: 9.23.1.19 Version: 9.22.2.14 Version: 9.23.1.22 Version: 9.22.2.20 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20121",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T15:56:35.178454Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T15:56:48.183Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.22.2.20"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access controls.\r\n\r\nThis vulnerability is due to a logic error in populating group access control policies (ACPs) with OGS configured. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Control",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:08:46.060Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ftd-acl-bypass-8p6vFvw",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-acl-bypass-8p6vFvw"
}
],
"source": {
"advisory": "cisco-sa-ftd-acl-bypass-8p6vFvw",
"defects": [
"CSCwr49050"
],
"discovery": "EXTERNAL"
},
"title": "CIsco FTD Bypass Access List"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20121",
"datePublished": "2026-09-16T20:24:54.360Z",
"dateReserved": "2025-10-08T11:59:15.377Z",
"dateUpdated": "2026-09-18T19:08:46.060Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20120 (GCVE-0-2026-20120)
Vulnerability from cvelistv5
Published
2026-09-16 20:19
Modified
2026-09-18 19:08
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-284 - Improper Access Control
Summary
A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access controls.
This vulnerability is due to a logic error in populating group access control policies (ACPs) with OGS configured. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.23.1 Version: 9.22.1.1 Version: 9.22.1.3 Version: 9.22.1.2 Version: 9.22.1.6 Version: 9.22.2 Version: 9.23.1.3 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.22.2.13 Version: 9.23.1.19 Version: 9.22.2.14 Version: 9.23.1.22 Version: 9.22.2.20 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20120",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T16:03:41.816941Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T16:03:51.646Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.22.2.20"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access controls.\r\n\r\nThis vulnerability is due to a logic error in populating group access control policies (ACPs) with OGS configured. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Control",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:08:46.057Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ftd-acl-bypass-8p6vFvw",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-acl-bypass-8p6vFvw"
}
],
"source": {
"advisory": "cisco-sa-ftd-acl-bypass-8p6vFvw",
"defects": [
"CSCwr04957"
],
"discovery": "INTERNAL"
},
"title": "Cisco FTD ACL bypass vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20120",
"datePublished": "2026-09-16T20:19:12.537Z",
"dateReserved": "2025-10-08T11:59:15.377Z",
"dateUpdated": "2026-09-18T19:08:46.057Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20290 (GCVE-0-2026-20290)
Vulnerability from cvelistv5
Published
2026-09-16 20:19
Modified
2026-09-17 17:29
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-805 - Buffer Access with Incorrect Length Value
Summary
A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart.
This vulnerability is due to incomplete validation of the SSL certificate. An attacker could exploit this vulnerability by sending a crafted SSL connection setup request to be parsed by Snort 2. A successful exploit could allow the attacker to cause the Snort 2 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software |
Version: 7.0.0 Version: 7.0.0.1 Version: 7.0.1 Version: 7.0.1.1 Version: 7.0.2 Version: 7.2.0 Version: 7.0.2.1 Version: 7.0.3 Version: 7.2.0.1 Version: 7.0.4 Version: 7.2.1 Version: 7.0.5 Version: 7.3.0 Version: 7.2.2 Version: 7.2.3 Version: 7.3.1 Version: 7.2.4 Version: 7.0.6 Version: 7.2.5 Version: 7.2.4.1 Version: 7.3.1.1 Version: 7.4.0 Version: 7.0.6.1 Version: 7.2.5.1 Version: 7.4.1 Version: 7.2.6 Version: 7.0.6.2 Version: 7.4.1.1 Version: 7.2.7 Version: 7.2.5.2 Version: 7.3.1.2 Version: 7.2.8 Version: 7.6.0 Version: 7.4.2 Version: 7.2.8.1 Version: 7.0.6.3 Version: 7.4.2.1 Version: 7.2.9 Version: 7.0.7 Version: 7.4.2.2 Version: 7.2.10 Version: 7.6.1 Version: 7.4.2.3 Version: 7.0.8 Version: 7.6.2 Version: 7.0.8.1 Version: 7.6.2.1 Version: 7.4.2.4 Version: 7.2.10.2 Version: 7.4.3 Version: 7.6.4 Version: 7.4.4 Version: 7.0.9 Version: 7.2.11 Version: 7.4.7 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20290",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T17:25:32.306457Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T17:29:41.938Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart.\r\n\r\nThis vulnerability is due to incomplete validation of the SSL certificate. An attacker could exploit this vulnerability by sending a crafted SSL connection setup request to be parsed by Snort 2. A successful exploit could allow the attacker to cause the Snort 2 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-805",
"description": "Buffer Access with Incorrect Length Value",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T20:19:02.761Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ftd-snort2-ssldos-Mw7WYX9c",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort2-ssldos-Mw7WYX9c"
}
],
"source": {
"advisory": "cisco-sa-ftd-snort2-ssldos-Mw7WYX9c",
"defects": [
"CSCwu03757"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20290",
"datePublished": "2026-09-16T20:19:02.761Z",
"dateReserved": "2025-10-08T11:59:15.405Z",
"dateUpdated": "2026-09-17T17:29:41.938Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20248 (GCVE-0-2026-20248)
Vulnerability from cvelistv5
Published
2026-09-16 20:17
Modified
2026-09-18 19:08
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-195 - Signed to Unsigned Conversion Error
Summary
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the device to reload.
This vulnerability is due to a logic error when parsing a DNS query and tracking the size of the incoming buffers. An attacker could exploit this vulnerability by formatting a crafted reply to a DNS query sent from the targeted device. A successful exploit could allow the attacker to cause the device to reload, causing a denial of service (DoS) condition.
Note: The attacker must be able to respond to DNS queries from the device, either by controlling the DNS service or through a machine-in-the-middle attack.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.18.1 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.19.1 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.19.1.5 Version: 9.16.4.18 Version: 9.19.1.9 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.19.1.12 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.19.1.18 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.19.1.22 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.19.1.24 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.19.1.27 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.19.1.28 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.19.1.31 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.19.1.37 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.19.1.38 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.18.4.82 Version: 9.20.4.235 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20248",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T13:32:41.718147Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T13:40:58.885Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.18.1"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.19.1"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.19.1.5"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.19.1.9"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.19.1.12"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.19.1.18"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.19.1.22"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.19.1.24"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.19.1.27"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.19.1.28"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.19.1.31"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.19.1.37"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.19.1.38"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.20.4.235"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the TCP DNS\u0026nbsp;response handler to unexpectedly restart, causing the device to reload.\r\n\r\nThis vulnerability is due to a logic error when parsing a DNS query and tracking the size of the incoming buffers. An attacker could exploit this vulnerability by formatting a crafted reply to a DNS query sent from the targeted device. A successful exploit could allow the attacker to cause the device to reload, causing a denial of service (DoS) condition.\r\nNote: The attacker must be able to respond to DNS queries from the device, either by controlling the DNS service or through a machine-in-the-middle attack."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-195",
"description": "Signed to Unsigned Conversion Error",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:08:55.877Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-asaftd-tcpdns-dos-p6dUnjr5",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tcpdns-dos-p6dUnjr5"
}
],
"source": {
"advisory": "cisco-sa-asaftd-tcpdns-dos-p6dUnjr5",
"defects": [
"CSCwu14285"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20248",
"datePublished": "2026-09-16T20:17:47.838Z",
"dateReserved": "2025-10-08T11:59:15.401Z",
"dateUpdated": "2026-09-18T19:08:55.877Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20323 (GCVE-0-2026-20323)
Vulnerability from cvelistv5
Published
2026-09-16 20:15
Modified
2026-09-17 11:39
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-295 - Improper Certificate Validation
Summary
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain access at the level of the manager role, which is equivalent to root.
This vulnerability is due to improper management of the TLS certificate for the sftunnel management connection. An attacker could exploit this vulnerability by connecting to the sftunnel port using a crafted TLS certificate. A successful exploit could allow the attacker to become a registered sftunnel peer with root access.
Note: The attack is successful only if the sftunnel connection is down or the attack can disrupt the sftunnel connection long enough to execute the attack.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Management Center (FMC) |
Version: 7.0.0 Version: 7.0.0.1 Version: 7.0.1 Version: 7.0.1.1 Version: 7.0.2 Version: 7.2.0 Version: 7.0.2.1 Version: 7.0.3 Version: 7.2.0.1 Version: 7.0.4 Version: 7.2.1 Version: 7.0.5 Version: 7.3.0 Version: 7.2.2 Version: 7.3.1 Version: 7.2.3 Version: 7.2.3.1 Version: 7.2.4 Version: 7.0.6 Version: 7.2.4.1 Version: 7.2.5 Version: 7.3.1.1 Version: 7.4.0 Version: 7.0.6.1 Version: 7.2.5.1 Version: 7.4.1 Version: 7.2.6 Version: 7.4.1.1 Version: 7.0.6.2 Version: 7.2.7 Version: 7.2.5.2 Version: 7.3.1.2 Version: 7.2.8 Version: 7.6.0 Version: 7.4.2 Version: 7.2.8.1 Version: 7.0.6.3 Version: 7.4.2.1 Version: 7.2.9 Version: 7.0.7 Version: 7.7.0 Version: 7.4.2.2 Version: 7.2.10 Version: 7.6.1 Version: 7.4.2.3 Version: 7.0.8 Version: 7.6.2 Version: 7.7.10 Version: 7.2.10.1 Version: 7.0.8.1 Version: 7.6.2.1 Version: 7.2.10.2 Version: 7.7.10.1 Version: 7.4.2.4 Version: 7.4.3 Version: 7.6.3 Version: 7.7.11 Version: 7.6.4 Version: 10.0.0 Version: 7.4.4 Version: 7.4.5 Version: 7.0.9 Version: 7.2.11 Version: 7.7.12 Version: 7.6.5 Version: 7.4.6 Version: 10.0.1 Version: 7.4.7 Version: 7.0.10 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20323",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T03:57:39.569102Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T11:39:21.989Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.7.12"
},
{
"status": "affected",
"version": "7.6.5"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "10.0.1"
},
{
"status": "affected",
"version": "7.4.7"
},
{
"status": "affected",
"version": "7.0.10"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
},
{
"status": "affected",
"version": "7.0.10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain access at the level of the\u0026nbsp;manager role, which is equivalent to root.\r\n\r\nThis vulnerability is due to improper management of the TLS certificate for the sftunnel management connection. An attacker could exploit this vulnerability by connecting to the sftunnel port using a crafted TLS certificate. A successful exploit could allow the attacker to become a registered sftunnel peer with root access.\r\nNote: The attack is successful only if the sftunnel connection is down or the attack can disrupt the sftunnel connection long enough to execute the attack."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "Improper Certificate Validation",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T20:15:35.850Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3"
}
],
"source": {
"advisory": "cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3",
"defects": [
"CSCwu16917"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20323",
"datePublished": "2026-09-16T20:15:35.850Z",
"dateReserved": "2025-10-08T11:59:15.411Z",
"dateUpdated": "2026-09-17T11:39:21.989Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20333 (GCVE-0-2026-20333)
Vulnerability from cvelistv5
Published
2026-09-16 20:14
Modified
2026-09-18 19:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-697 - Incorrect Comparison
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20333 are related to incorrect comparison conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-697.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.16.4.18 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.18.4.82 Version: 9.24.10 Version: 9.20.4.235 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20333",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T03:57:41.757285Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T11:39:22.430Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.24.10"
},
{
"status": "affected",
"version": "9.20.4.235"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.7.12"
},
{
"status": "affected",
"version": "7.6.5"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "10.0.1"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20333 are related to incorrect comparison conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-697."
}
],
"exploits": [
{
"lang": "en",
"value": "Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-697",
"description": "Incorrect Comparison",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:10:06.359Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"
}
],
"source": {
"advisory": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"defects": [
"CSCwu46584"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20333",
"datePublished": "2026-09-16T20:14:31.366Z",
"dateReserved": "2025-10-08T11:59:15.412Z",
"dateUpdated": "2026-09-18T19:10:06.359Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20334 (GCVE-0-2026-20334)
Vulnerability from cvelistv5
Published
2026-09-16 20:14
Modified
2026-09-18 19:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-710 - Improper Adherence to Coding Standards
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20334 are related to issues concerning improper adherence to coding standards that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-710.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.16.4.18 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.18.4.82 Version: 9.24.10 Version: 9.20.4.235 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20334",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T03:57:42.844373Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T11:39:22.575Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.24.10"
},
{
"status": "affected",
"version": "9.20.4.235"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.7.12"
},
{
"status": "affected",
"version": "7.6.5"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "10.0.1"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20334 are related to issues concerning improper adherence to coding standards that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-710."
}
],
"exploits": [
{
"lang": "en",
"value": "Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-710",
"description": "Improper Adherence to Coding Standards",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:10:35.503Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"
}
],
"source": {
"advisory": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"defects": [
"CSCwu43352"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20334",
"datePublished": "2026-09-16T20:14:08.968Z",
"dateReserved": "2025-10-08T11:59:15.412Z",
"dateUpdated": "2026-09-18T19:10:35.503Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20332 (GCVE-0-2026-20332)
Vulnerability from cvelistv5
Published
2026-09-16 20:13
Modified
2026-09-18 19:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-284 - Improper Access Control
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20332 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.16.4.18 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.18.4.82 Version: 9.24.10 Version: 9.20.4.235 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20332",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T03:57:45.091059Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T11:39:23.121Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.24.10"
},
{
"status": "affected",
"version": "9.20.4.235"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.7.12"
},
{
"status": "affected",
"version": "7.6.5"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "10.0.1"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-20332 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284."
}
],
"exploits": [
{
"lang": "en",
"value": "Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Control",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:10:06.697Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"
}
],
"source": {
"advisory": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"defects": [
"CSCwu12571"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20332",
"datePublished": "2026-09-16T20:13:54.216Z",
"dateReserved": "2025-10-08T11:59:15.412Z",
"dateUpdated": "2026-09-18T19:10:06.697Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20154 (GCVE-0-2026-20154)
Vulnerability from cvelistv5
Published
2026-09-16 20:13
Modified
2026-09-18 19:09
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Summary
A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service (DoS) condition.
This vulnerability is due to improper rate limiting for syslog message 419002. An attacker could exploit this vulnerability by sending a flood of TCP synchronization (SYN) packets to an affected device. A successful exploit could allow the attacker to cause high CPU utilization, resulting in performance degradation.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.18.1 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.19.1 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.19.1.5 Version: 9.16.4.18 Version: 9.19.1.9 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.19.1.12 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.19.1.18 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.19.1.22 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.19.1.24 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.19.1.27 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.19.1.28 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.19.1.31 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.19.1.37 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.19.1.38 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20154",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-18T14:39:37.915604Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T14:46:19.549Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.18.1"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.19.1"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.19.1.5"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.19.1.9"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.19.1.12"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.19.1.18"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.19.1.22"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.19.1.24"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.19.1.27"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.19.1.28"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.19.1.31"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.19.1.37"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.19.1.38"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "7.4.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper rate limiting for syslog message 419002. An attacker could exploit this vulnerability by sending a flood of TCP synchronization (SYN) packets to an affected device. A successful exploit could allow the attacker to cause high CPU utilization, resulting in performance degradation.\u0026nbsp;"
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-835",
"description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:09:05.715Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-asa-ftd-logging-dos-ZXXNesfN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-logging-dos-ZXXNesfN"
}
],
"source": {
"advisory": "cisco-sa-asa-ftd-logging-dos-ZXXNesfN",
"defects": [
"CSCwq97424"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20154",
"datePublished": "2026-09-16T20:13:40.103Z",
"dateReserved": "2025-10-08T11:59:15.386Z",
"dateUpdated": "2026-09-18T19:09:05.715Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20222 (GCVE-0-2026-20222)
Vulnerability from cvelistv5
Published
2026-09-16 20:12
Modified
2026-09-18 19:08
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-401 - Missing Release of Memory after Effective Lifetime
Summary
A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to improper resource management when handling EIGRP update messages. An attacker could exploit this vulnerability by sending crafted EIGRP updates at a high rate to an affected device. A successful exploit could allow the attacker to trigger a memory leak that will eventually cause the affected device to reload unexpectedly.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.19.1 Version: 9.19.1.5 Version: 9.19.1.9 Version: 9.19.1.12 Version: 9.19.1.18 Version: 9.20.1 Version: 9.19.1.22 Version: 9.20.1.5 Version: 9.19.1.24 Version: 9.20.2 Version: 9.19.1.27 Version: 9.20.2.10 Version: 9.19.1.28 Version: 9.20.2.21 Version: 9.19.1.31 Version: 9.20.2.22 Version: 9.20.3 Version: 9.23.1 Version: 9.22.1.1 Version: 9.20.3.4 Version: 9.20.3.7 Version: 9.19.1.37 Version: 9.20.3.9 Version: 9.19.1.38 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.22.2.14 Version: 9.24.1 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.22.2.32 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.20.4.235 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20222",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T14:52:36.394409Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T14:52:51.759Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.19.1"
},
{
"status": "affected",
"version": "9.19.1.5"
},
{
"status": "affected",
"version": "9.19.1.9"
},
{
"status": "affected",
"version": "9.19.1.12"
},
{
"status": "affected",
"version": "9.19.1.18"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.19.1.22"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.19.1.24"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.19.1.27"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.19.1.28"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.19.1.31"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.19.1.37"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.19.1.38"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.20.4.235"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper resource management when handling EIGRP update messages. An attacker could exploit this vulnerability by sending crafted EIGRP updates at a high rate to an affected device. A successful exploit could allow the attacker to trigger a memory leak that will eventually cause the affected device to reload unexpectedly."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-401",
"description": "Missing Release of Memory after Effective Lifetime",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:08:55.420Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-asaftd-eigrp-dos-GOhNejSj",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-eigrp-dos-GOhNejSj"
}
],
"source": {
"advisory": "cisco-sa-asaftd-eigrp-dos-GOhNejSj",
"defects": [
"CSCwo05022"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20222",
"datePublished": "2026-09-16T20:12:18.963Z",
"dateReserved": "2025-10-08T11:59:15.398Z",
"dateUpdated": "2026-09-18T19:08:55.420Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20135 (GCVE-0-2026-20135)
Vulnerability from cvelistv5
Published
2026-09-16 20:12
Modified
2026-09-17 13:40
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-415 - Double Free
Summary
A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to improper buffer management during the TLS 1.3 connection. An attacker could exploit this vulnerability by sending a crafted TLS 1.3 packet to an affected system through a TLS 1.3-enabled listening socket. A successful exploit could allow the attacker to cause the LINA process to crash, which would cause the device to reload. The reload can happen before or after authentication of the connection.Note: TLS 1.3 connections include both data traffic and user-management traffic.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software |
Version: 7.0.0 Version: 7.0.0.1 Version: 7.0.1 Version: 7.0.1.1 Version: 7.0.2 Version: 7.2.0 Version: 7.0.2.1 Version: 7.0.3 Version: 7.2.0.1 Version: 7.0.4 Version: 7.2.1 Version: 7.0.5 Version: 7.3.0 Version: 7.2.2 Version: 7.2.3 Version: 7.3.1 Version: 7.2.4 Version: 7.0.6 Version: 7.2.5 Version: 7.2.4.1 Version: 7.3.1.1 Version: 7.4.0 Version: 7.0.6.1 Version: 7.2.5.1 Version: 7.4.1 Version: 7.2.6 Version: 7.0.6.2 Version: 7.4.1.1 Version: 7.2.7 Version: 7.2.5.2 Version: 7.3.1.2 Version: 7.2.8 Version: 7.6.0 Version: 7.4.2 Version: 7.2.8.1 Version: 7.0.6.3 Version: 7.4.2.1 Version: 7.2.9 Version: 7.0.7 Version: 7.7.0 Version: 7.4.2.2 Version: 7.2.10 Version: 7.6.1 Version: 7.4.2.3 Version: 7.0.8 Version: 7.6.2 Version: 7.7.10 Version: 7.7.11 Version: 7.0.8.1 Version: 7.6.2.1 Version: 7.7.10.1 Version: 7.4.2.4 Version: 7.2.10.2 Version: 7.4.3 Version: 7.6.4 Version: 7.4.4 Version: 7.0.9 Version: 7.2.11 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20135",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T13:35:03.490455Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T13:40:57.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper buffer management during the TLS 1.3 connection. An attacker could exploit this vulnerability by sending a crafted TLS 1.3 packet to an affected system through a TLS 1.3-enabled listening socket. A successful exploit could allow the attacker to cause the LINA process to crash, which would cause the device to reload. The reload can happen before or after authentication of the connection.Note:\u0026nbsp;TLS 1.3 connections include both data traffic and user-management traffic."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-415",
"description": "Double Free",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T20:12:09.389Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ftd-tls1.3-dos-dLxwFWgF",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls1.3-dos-dLxwFWgF"
}
],
"source": {
"advisory": "cisco-sa-ftd-tls1.3-dos-dLxwFWgF",
"defects": [
"CSCwo83926"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20135",
"datePublished": "2026-09-16T20:12:09.389Z",
"dateReserved": "2025-10-08T11:59:15.381Z",
"dateUpdated": "2026-09-17T13:40:57.832Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20336 (GCVE-0-2026-20336)
Vulnerability from cvelistv5
Published
2026-09-16 20:11
Modified
2026-09-18 19:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-664 - Improper Control of a Resource Through its Lifetime
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20336 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.16.4.18 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.18.4.82 Version: 9.24.10 Version: 9.20.4.235 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20336",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T03:56:10.090Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.24.10"
},
{
"status": "affected",
"version": "9.20.4.235"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.7.12"
},
{
"status": "affected",
"version": "7.6.5"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "10.0.1"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20336 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664."
}
],
"exploits": [
{
"lang": "en",
"value": "Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-664",
"description": "Improper Control of a Resource Through its Lifetime",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:10:51.077Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"
}
],
"source": {
"advisory": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"defects": [
"CSCwu20579"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20336",
"datePublished": "2026-09-16T20:11:44.943Z",
"dateReserved": "2025-10-08T11:59:15.413Z",
"dateUpdated": "2026-09-18T19:10:51.077Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20249 (GCVE-0-2026-20249)
Vulnerability from cvelistv5
Published
2026-09-16 20:11
Modified
2026-09-18 19:09
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-704 - Incorrect Type Conversion or Cast
Summary
A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly.
This vulnerability is due to a logic error during the certificate authentication phase of the IKEv2 connection setup. An attacker could exploit this vulnerability by attempting to establish an IKEv2 VPN connection with a crafted certificate. A successful exploit could allow the attacker to cause the IKEv2 process to crash, causing a denial of service (DoS) condition.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.18.1 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.19.1 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.19.1.5 Version: 9.16.4.18 Version: 9.19.1.9 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.19.1.12 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.19.1.18 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.19.1.22 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.19.1.24 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.19.1.27 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.19.1.28 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.19.1.31 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.19.1.37 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.19.1.38 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.18.4.82 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20249",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-18T14:39:33.426532Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T14:46:36.166Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.18.1"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.19.1"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.19.1.5"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.19.1.9"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.19.1.12"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.19.1.18"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.19.1.22"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.19.1.24"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.19.1.27"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.19.1.28"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.19.1.31"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.19.1.37"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.19.1.38"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.18.4.82"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2)\u0026nbsp;for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly.\r\n\r\nThis vulnerability is due to a logic error during the certificate authentication phase of the IKEv2 connection setup. An attacker could exploit this vulnerability by attempting to establish an IKEv2 VPN connection with a crafted certificate. A successful exploit could allow the attacker to cause the IKEv2 process to crash, causing a denial of service (DoS) condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-704",
"description": "Incorrect Type Conversion or Cast",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:09:05.719Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-asaftd-ikev2cert-dos-uWyc2xtv",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2cert-dos-uWyc2xtv"
}
],
"source": {
"advisory": "cisco-sa-asaftd-ikev2cert-dos-uWyc2xtv",
"defects": [
"CSCwt42671"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20249",
"datePublished": "2026-09-16T20:11:43.164Z",
"dateReserved": "2025-10-08T11:59:15.401Z",
"dateUpdated": "2026-09-18T19:09:05.719Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20335 (GCVE-0-2026-20335)
Vulnerability from cvelistv5
Published
2026-09-16 20:10
Modified
2026-09-18 19:10
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-682 - Incorrect Calculation
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20335 are related to incorrect calculation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-682.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.16.4.18 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.18.4.82 Version: 9.24.10 Version: 9.20.4.235 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20335",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-18T03:56:05.270502Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T13:41:16.060Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.24.10"
},
{
"status": "affected",
"version": "9.20.4.235"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.7.12"
},
{
"status": "affected",
"version": "7.6.5"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "10.0.1"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20335 are related to incorrect calculation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-682."
}
],
"exploits": [
{
"lang": "en",
"value": "Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-682",
"description": "Incorrect Calculation",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:10:28.418Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"
}
],
"source": {
"advisory": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"defects": [
"CSCwu17810"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20335",
"datePublished": "2026-09-16T20:10:00.614Z",
"dateReserved": "2025-10-08T11:59:15.413Z",
"dateUpdated": "2026-09-18T19:10:28.418Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20295 (GCVE-0-2026-20295)
Vulnerability from cvelistv5
Published
2026-09-16 20:09
Modified
2026-09-17 13:40
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-789 - Memory Allocation with Excessive Size Value
Summary
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available memory of an affected device.
This vulnerability is due to improper management of memory resources during sftunnel TLS connection setup. An attacker could exploit this vulnerability by sending crafted sftunnel TLS frames to an affected device during the connection setup. A successful exploit could allow the attacker to exhaust the available memory on the affected device, which could result in a DoS condition.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Management Center (FMC) |
Version: 7.0.0 Version: 7.0.0.1 Version: 7.0.1 Version: 7.0.1.1 Version: 7.0.2 Version: 7.2.0 Version: 7.0.2.1 Version: 7.0.3 Version: 7.2.0.1 Version: 7.0.4 Version: 7.2.1 Version: 7.0.5 Version: 7.3.0 Version: 7.2.2 Version: 7.3.1 Version: 7.2.3 Version: 7.2.3.1 Version: 7.2.4 Version: 7.0.6 Version: 7.2.4.1 Version: 7.2.5 Version: 7.3.1.1 Version: 7.4.0 Version: 7.0.6.1 Version: 7.2.5.1 Version: 7.4.1 Version: 7.2.6 Version: 7.4.1.1 Version: 7.0.6.2 Version: 7.2.7 Version: 7.2.5.2 Version: 7.3.1.2 Version: 7.2.8 Version: 7.6.0 Version: 7.4.2 Version: 7.2.8.1 Version: 7.0.6.3 Version: 7.4.2.1 Version: 7.2.9 Version: 7.0.7 Version: 7.7.0 Version: 7.4.2.2 Version: 7.2.10 Version: 7.6.1 Version: 7.4.2.3 Version: 7.0.8 Version: 7.6.2 Version: 7.7.10 Version: 7.2.10.1 Version: 7.0.8.1 Version: 7.6.2.1 Version: 7.2.10.2 Version: 7.7.10.1 Version: 7.4.2.4 Version: 7.4.3 Version: 7.6.3 Version: 7.7.11 Version: 7.6.4 Version: 10.0.0 Version: 7.4.4 Version: 7.4.5 Version: 7.0.9 Version: 7.2.11 Version: 7.7.12 Version: 7.6.5 Version: 7.4.6 Version: 10.0.1 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20295",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T13:34:54.339532Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T13:40:57.982Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.7.12"
},
{
"status": "affected",
"version": "7.6.5"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "10.0.1"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available memory of an affected device.\r\n\r\nThis vulnerability is due to improper management of memory resources during sftunnel TLS connection setup. An attacker could exploit this vulnerability by sending crafted sftunnel TLS frames to an affected device\u0026nbsp;during the connection setup. A successful exploit could allow the attacker to exhaust the available memory on the affected device, which could result in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-789",
"description": "Memory Allocation with Excessive Size Value",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T20:09:56.746Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3"
}
],
"source": {
"advisory": "cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3",
"defects": [
"CSCwv37480"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20295",
"datePublished": "2026-09-16T20:09:56.746Z",
"dateReserved": "2025-10-08T11:59:15.405Z",
"dateUpdated": "2026-09-17T13:40:57.982Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20250 (GCVE-0-2026-20250)
Vulnerability from cvelistv5
Published
2026-09-16 20:09
Modified
2026-09-18 19:09
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-772 - Missing Release of Resource after Effective Lifetime
Summary
A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper resource management when processing certain DTLS messages. An attacker could exploit this vulnerability by sending a crafted stream of DTLS traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.23.1 Version: 9.22.1.1 Version: 9.22.1.3 Version: 9.22.1.6 Version: 9.22.2 Version: 9.23.1.3 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.22.2.13 Version: 9.23.1.19 Version: 9.22.2.14 Version: 9.24.1 Version: 9.23.1.22 Version: 9.22.2.20 Version: 9.23.1.26 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20250",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T14:54:18.161264Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T14:54:32.297Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.23.1.26"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper resource management when processing certain DTLS messages. An attacker could exploit this vulnerability by sending a crafted stream of DTLS traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-772",
"description": "Missing Release of Resource after Effective Lifetime",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:09:13.591Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-asaftd-dtls-dos-Kp57HkyO",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dtls-dos-Kp57HkyO"
}
],
"source": {
"advisory": "cisco-sa-asaftd-dtls-dos-Kp57HkyO",
"defects": [
"CSCws60947"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20250",
"datePublished": "2026-09-16T20:09:56.693Z",
"dateReserved": "2025-10-08T11:59:15.401Z",
"dateUpdated": "2026-09-18T19:09:13.591Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20330 (GCVE-0-2026-20330)
Vulnerability from cvelistv5
Published
2026-09-16 20:03
Modified
2026-09-18 19:09
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-707 - Improper Neutralization
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Version: 9.16.1 Version: 9.16.1.28 Version: 9.16.2 Version: 9.16.2.3 Version: 9.16.2.7 Version: 9.16.2.11 Version: 9.16.2.13 Version: 9.16.2.14 Version: 9.16.3.3 Version: 9.16.3 Version: 9.16.3.14 Version: 9.16.3.15 Version: 9.18.1.3 Version: 9.18.2 Version: 9.16.3.19 Version: 9.16.3.23 Version: 9.18.2.5 Version: 9.16.4 Version: 9.18.2.7 Version: 9.16.4.9 Version: 9.18.2.8 Version: 9.16.4.14 Version: 9.18.3 Version: 9.16.4.18 Version: 9.18.3.39 Version: 9.16.4.19 Version: 9.18.3.46 Version: 9.16.4.27 Version: 9.18.3.53 Version: 9.18.3.55 Version: 9.16.4.38 Version: 9.16.4.39 Version: 9.18.3.56 Version: 9.20.1 Version: 9.16.4.42 Version: 9.18.4 Version: 9.20.1.5 Version: 9.18.4.5 Version: 9.16.4.48 Version: 9.18.4.8 Version: 9.20.2 Version: 9.16.4.55 Version: 9.18.4.22 Version: 9.20.2.10 Version: 9.16.4.57 Version: 9.18.4.24 Version: 9.20.2.21 Version: 9.16.4.61 Version: 9.18.4.29 Version: 9.20.2.22 Version: 9.16.4.62 Version: 9.18.4.34 Version: 9.20.3 Version: 9.16.4.67 Version: 9.16.4.70 Version: 9.18.4.40 Version: 9.23.1 Version: 9.22.1.1 Version: 9.16.4.71 Version: 9.20.3.4 Version: 9.18.4.47 Version: 9.20.3.7 Version: 9.16.4.76 Version: 9.20.3.9 Version: 9.18.4.50 Version: 9.22.1.3 Version: 9.20.3.10 Version: 9.22.1.2 Version: 9.18.4.52 Version: 9.20.3.13 Version: 9.22.1.6 Version: 9.18.4.53 Version: 9.16.4.82 Version: 9.22.2 Version: 9.20.3.16 Version: 9.19.1.42 Version: 9.18.4.57 Version: 9.16.4.84 Version: 9.23.1.3 Version: 9.20.3.20 Version: 9.22.2.4 Version: 9.23.1.7 Version: 9.20.4 Version: 9.22.2.9 Version: 9.23.1.13 Version: 9.20.4.7 Version: 9.22.2.13 Version: 9.18.4.66 Version: 9.20.4.10 Version: 9.23.1.19 Version: 9.16.4.85 Version: 9.22.2.14 Version: 9.18.4.67 Version: 9.24.1 Version: 9.18.4.68 Version: 9.23.1.22 Version: 9.20.4.14 Version: 9.22.2.20 Version: 9.18.4.71 Version: 9.20.4.19 Version: 9.23.1.26 Version: 9.16.4.89 Version: 9.22.2.32 Version: 9.18.4.76 Version: 9.22.3 Version: 9.24.1.5 Version: 9.20.4.22 Version: 9.24.1.9 Version: 9.20.4.28 Version: 9.22.3.5 Version: 9.16.4.92 Version: 9.18.4.135 Version: 9.23.1.195 Version: 9.20.4.30 Version: 9.24.1.155 Version: 9.23.1.32 Version: 9.24.1.11 Version: 9.20.4.34 Version: 9.18.4.82 Version: 9.24.10 Version: 9.20.4.235 |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20330",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-18T03:55:47.606454Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T13:41:16.774Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.24.10"
},
{
"status": "affected",
"version": "9.20.4.235"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.4.5"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.7.12"
},
{
"status": "affected",
"version": "7.6.5"
},
{
"status": "affected",
"version": "7.4.6"
},
{
"status": "affected",
"version": "10.0.1"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707."
}
],
"exploits": [
{
"lang": "en",
"value": "Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-707",
"description": "Improper Neutralization",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-18T19:09:17.609Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"
}
],
"source": {
"advisory": "cisco-sa-hardening-asaftdfmc-uvpPROhN",
"defects": [
"CSCwu43335"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20330",
"datePublished": "2026-09-16T20:03:09.987Z",
"dateReserved": "2025-10-08T11:59:15.412Z",
"dateUpdated": "2026-09-18T19:09:17.609Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}