CVE-2026-20043
CVSS 9 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review.
Vulnerabilities · 7h ago
Cisco disclosed four vulnerabilities in Snort 3 across seven products, including Cisco Cyber Vision, Secure Firewall Threat Defense, Meraki MX Security Appliances and Open Source Snort 3. Two flaws are critical and two are high. Cisco says affected products are vulnerable regardless of configuration, so an intrusion policy’s Snort 3 settings do not reliably narrow the scope.
The advisory links CVE-2026-20043 to out-of-bounds memory writes and CVE-2026-20236 to incorrect calculations, but does not give enough detail to describe individual exploit paths. Cisco says it automatically updated Cloud-delivered Firewall, Secure Access and Dashboard-connected Meraki devices. Cyber Vision, Firepower Threat Defense, UTD on IOS XE and Open Source Snort 3 have product- or branch-specific corrected releases; no workaround is listed.
For organizations running these products, the shared Snort component creates a common exposure, but automatic updates cover only part of the list. Separately managed products and branches may remain on different remediation timelines.
CVSS 9 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review.
CVSS 7.5 HIGH: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review.
7 sources covering this story
Múltiples vulnerabilidades en productos de Cisco
Cisco ha publicado 4 vulnerabilidades: 2 de severidad crítica y 2 de severidad alta.
Kwetsbaarheden verholpen in Cisco Expressway Series
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Expressway Series.
Kwetsbaarheden verholpen in Snort 3 van Cisco
Cisco heeft meerdere kwetsbaarheden verholpen in Snort 3, het open source intrusion detection en prevention systeem dat in diverse Cisco-producten wordt gebruikt.
Cisco Patches 34 Vulnerabilities Across Multiple Products
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.
Múltiples vulnerabilidades en productos de Cisco
Cisco ha publicado 8 vulnerabilidades: 3 de severidad crítica y 5 de severidad alta, que en caso de se
Zero Day Initiative Advisories
Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability
Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability Vulnerability Details This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort.
Aggiornamenti di sicurezza per prodotti Cisco
Cisco ha rilasciato aggiornamenti di sicurezza per risolvere 34 vulnerabilità nei propri prodotti, di cui 5 con gravità “critica” e 17 con gravità “alta”.
Multiple Cisco Products Snort 3 Denial of Service Vulnerability
Multiple Cisco Products Snort 3 Denial of Service Vulnerability.
Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability.
Cisco Expressway Series Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review.
Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability.
Cisco Expressway Series Information Disclosure Vulnerability
Cisco Expressway Series Information Disclosure Vulnerability.
Part of the PlainSec briefing for 2026-10-23