Buffer Handling Vulnerability in Cisco's Snort 3 Detection Engine
CVE-2026-20026

5.8MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Secure Firewall Threat Defense (ftd) Software
Cisco Utd Snort Ips Engine Software
Vendor
CVE Published:
7 January 2026

Badges

👾 Exploit Exists

What is CVE-2026-20026?

Multiple Cisco products are vulnerable due to flawed buffer handling when processing DCE/RPC requests. An unauthenticated, remote attacker can exploit this flaw to trigger a use-after-free condition, enabling them to send numerous DCE/RPC requests that could lead to sensitive information leaks or unexpectedly restart the Snort 3 Detection Engine, causing potential denial of service interruptions.

Affected Version(s)

Cisco Secure Firewall Threat Defense (FTD) Software 7.0.0

Cisco Secure Firewall Threat Defense (FTD) Software 7.0.0.1

Cisco Secure Firewall Threat Defense (FTD) Software 7.0.1

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.