Improper Privilege Management in Cisco's Open Source Snort 3 Software
CVE-2026-20291

7.8HIGH

Key Information:

Vendor

Cisco
Status
Cisco Cyber Vision
Cisco Open Source Snort3
Cisco Secure Firewall Threat Defense (ftd) Software
Cisco Utd Snort Ips Engine Software
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-20291?

Cisco's Open Source Snort 3 Software has been identified with vulnerabilities pertaining to improper privilege management, categorized under the Base Common Weakness Enumeration (CWE-269). The Snort team has undertaken a thorough internal security review and released software hardening updates to mitigate these identified issues, demonstrating Cisco's commitment to enhancing security and product quality.

Affected Version(s)

Cisco Cyber Vision 3.0.0

Cisco Cyber Vision 3.0.2

Cisco Cyber Vision 3.0.3

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.