CVE-2026-20057
Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability
Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to lack of proper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending a crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart causing a a denial of service (DoS) condition.
| CWE | CWE-369 |
| Vendor | cisco |
| Product | cisco cyber vision |
| Ecosystems | |
| Industries | NetworkingTelecommunications |
| Published | Mar 4, 2026 |
| Last Updated | Mar 4, 2026 |
Get instant alerts for cisco cisco cyber vision
Be the first to know when new medium vulnerabilities affecting cisco cisco cyber vision are published โ delivered to Slack, Telegram or Discord.
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L