VulnSocial

CVE-2026-20058Disclosure(cisco / secure_firewall_threat_defense)

LOWCVSS 5.8 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.

cisco CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-786

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • secure_firewall_threat_defense
  • snort
  • unified_threat_defense_snort_intrusion_prevention_system_engine

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
cisco
Products
secure_firewall_threat_defensesnortunified_threat_defense_snort_intrusion_prevention_system_engine

67 versions affected across 3 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-04: 203-04
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets3 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-20058 Unauthenticated Snort 3 VBA Data Decompression Vulnerabilities in... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20058 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The text only announces CVE-2026-20058 with a brief description and a link to a vendor site, offering no evidence of PoC, exploitation, patching, or deeper technical detail.

    0000048
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-20058 Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection… https://www.cve.org/CVERecord?id=CVE-2026-20058

    Post summary

    The post announces CVE-2026-20058, noting it affects Cisco products via Snort 3 VBA, and cites the CVE record, but provides no deeper technical or exploitation details.

    0000090
    56.6K followersView on X
CPE platform detail68 entries

68 of 68 entries

PartVendorProductVersionTarget SWTarget HW
Appciscosecure_firewall_threat_defense7.2.0--
Appciscosecure_firewall_threat_defense7.2.0.1--
Appciscosecure_firewall_threat_defense7.2.1--
Appciscosecure_firewall_threat_defense7.2.10--
Appciscosecure_firewall_threat_defense7.2.10.2--
Appciscosecure_firewall_threat_defense7.2.2--
Appciscosecure_firewall_threat_defense7.2.3--
Appciscosecure_firewall_threat_defense7.2.4--
Appciscosecure_firewall_threat_defense7.2.4.1--
Appciscosecure_firewall_threat_defense7.2.5--
Appciscosecure_firewall_threat_defense7.2.5.1--
Appciscosecure_firewall_threat_defense7.2.5.2--
Appciscosecure_firewall_threat_defense7.2.6--
Appciscosecure_firewall_threat_defense7.2.7--
Appciscosecure_firewall_threat_defense7.2.8--
Appciscosecure_firewall_threat_defense7.2.8.1--
Appciscosecure_firewall_threat_defense7.2.9--
Appciscosecure_firewall_threat_defense7.3.0--
Appciscosecure_firewall_threat_defense7.3.1--
Appciscosecure_firewall_threat_defense7.3.1.1--
Appciscosecure_firewall_threat_defense7.3.1.2--
Appciscosecure_firewall_threat_defense7.4.0--
Appciscosecure_firewall_threat_defense7.4.1--
Appciscosecure_firewall_threat_defense7.4.1.1--
Appciscosecure_firewall_threat_defense7.4.2--
Appciscosecure_firewall_threat_defense7.4.2.1--
Appciscosecure_firewall_threat_defense7.4.2.2--
Appciscosecure_firewall_threat_defense7.4.2.3--
Appciscosecure_firewall_threat_defense7.4.2.4--
Appciscosecure_firewall_threat_defense7.4.3--
Appciscosecure_firewall_threat_defense7.6.0--
Appciscosecure_firewall_threat_defense7.6.1--
Appciscosecure_firewall_threat_defense7.6.2--
Appciscosecure_firewall_threat_defense7.6.2.1--
Appciscosecure_firewall_threat_defense7.7.0--
Appciscosecure_firewall_threat_defense7.7.10--
Appciscosecure_firewall_threat_defense7.7.10.1--
Appciscosnort---
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.1a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.2--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.3--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.3a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.4--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.4a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.4b--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.5--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.5a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.5b--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.5c--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.5d--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.12.6--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.13.1a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.14.1a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.15.1a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.15.2a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.15.2c--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.15.3--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.15.3a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.15.4--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.15.4c--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.16.1a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.17.1--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.18.1--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.18.1a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.18.2--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.9.3a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.9.5a--
OSciscounified_threat_defense_snort_intrusion_prevention_system_engine17.9.6--

Explore more

Back to dashboardcisco CVEssecure_firewall_threat_defense vulnerabilities