Denial of Service Vulnerability in Cisco Secure Firewall Threat Defense Software

CVE-2026-20290

What is CVE-2026-20290?

A vulnerability in the SSL/TLS certificate parsing of the Snort 2 Detection Engine in Cisco Secure Firewall Threat Defense Software can be exploited by an unauthenticated, remote attacker. By sending a specially crafted SSL connection setup request, the attacker could trigger a restart of the Snort 2 Detection Engine. This unexpected restart may lead to a denial of service (DoS) condition, affecting the availability of the security services provided by the firewall.

References