CVE-2026-20043
CVSS 9 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review.
Vulnerabilità · 7 ore fa
Cisco ha divulgato quattro vulnerabilità in Snort 3 che coinvolgono sette prodotti, indipendentemente dalla configurazione: CDFW, Cyber Vision, Meraki MX, Secure Access, Secure Firewall Threat Defense, Snort 3 open source e UTD su IOS XE. Due falle sono critiche, con CVSS 9.0, e corrispondono a CVE-2026-20043 e CVE-2026-20236. Non risultano sfruttamenti segnalati.
Cisco ha già applicato le correzioni a CDFW, Secure Access e ai dispositivi Meraki collegati a Dashboard. Per gli altri prodotti, le versioni corrette sono Snort 3 3.12.4.0; Cyber Vision 5.6.0; FTD 7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2 o 10.1.0; UTD su IOS XE 17.12.8, 17.15.6, 17.18.5, 26.1.2 o 26.2.1, secondo la versione installata. Per Cyber Vision precedente alla 5.6 è prevista la migrazione a una versione corretta. Non sono disponibili workaround.
La configurazione non permette di restringere l'insieme dei sistemi esposti. La correzione, invece, varia per prodotto e ramo: l'aggiornamento automatico dichiarato da Cisco per alcuni servizi non copre l'intero insieme interessato.
CVSS 9 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review.
CVSS 7.5 HIGH: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review.
7 fonti che coprono questa storia
Múltiples vulnerabilidades en productos de Cisco
Cisco ha publicado 4 vulnerabilidades: 2 de severidad crítica y 2 de severidad alta.
Kwetsbaarheden verholpen in Cisco Expressway Series
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Expressway Series.
Kwetsbaarheden verholpen in Snort 3 van Cisco
Cisco heeft meerdere kwetsbaarheden verholpen in Snort 3, het open source intrusion detection en prevention systeem dat in diverse Cisco-producten wordt gebruikt.
Cisco Patches 34 Vulnerabilities Across Multiple Products
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.
Múltiples vulnerabilidades en productos de Cisco
Cisco ha publicado 8 vulnerabilidades: 3 de severidad crítica y 5 de severidad alta, que en caso de se
Zero Day Initiative Advisories
Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability
Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability Vulnerability Details This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort.
Aggiornamenti di sicurezza per prodotti Cisco
Cisco ha rilasciato aggiornamenti di sicurezza per risolvere 34 vulnerabilità nei propri prodotti, di cui 5 con gravità “critica” e 17 con gravità “alta”.
Cisco Expressway Series Remote Code Execution Vulnerability
A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands
Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities.
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability.
Multiple Cisco Products Snort 3 Denial of Service Vulnerability
Multiple Cisco Products Snort 3 Denial of Service Vulnerability.
Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability.
Part of the PlainSec briefing for 2026-10-23