CVE-2026-20026
Full vulnerability record from the local CVENow database.
Description
Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer use-after-free read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to unexpectedly restart the Snort 3 Detection Engine, which could cause a denial of service (DoS).
Severity
MEDIUM
CVSS score
5.8
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2026-01-07 17:16:02.663000
Last modified
2026-10-26 21:10:00.170000
View original CVE JSON
{
"id": "CVE-2026-20026",
"sourceIdentifier": "[email protected]",
"published": "2026-01-07T17:16:02.663",
"lastModified": "2026-10-26T21:10:00.170",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer use-after-free read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to unexpectedly restart the Snort 3 Detection Engine, which could cause a denial of service (DoS)."
},
{
"lang": "es",
"value": "Múltiples productos Cisco están afectados por una vulnerabilidad en el procesamiento de solicitudes DCE/RPC que podría permitir a un atacante remoto no autenticado causar que el motor de detección de Snort 3 filtre información sensible o se reinicie, lo que resultaría en una interrupción de la inspección de paquetes.\n\nEsta vulnerabilidad se debe a un error en la lógica de manejo de búfer al procesar solicitudes DCE/RPC, lo que puede resultar en una lectura de uso después de liberación de búfer. Un atacante podría explotar esta vulnerabilidad enviando un gran número de solicitudes DCE/RPC a través de una conexión establecida que es inspeccionada por Snort 3. Un exploit exitoso podría permitir al atacante reiniciar inesperadamente el motor de detección de Snort 3, lo que podría causar una denegación de servicio (DoS)."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "7.0.0",
"status": "affected"
},
{
"version": "7.0.0.1",
"status": "affected"
},
{
"version": "7.0.1",
"status": "affected"
},
{
"version": "7.1.0",
"status": "affected"
},
{
"version": "7.0.1.1",
"status": "affected"
},
{
"version": "7.1.0.1",
"status": "affected"
},
{
"version": "7.0.2",
"status": "affected"
},
{
"version": "7.2.0",
"status": "affected"
},
{
"version": "7.0.2.1",
"status": "affected"
},
{
"version": "7.0.3",
"status": "affected"
},
{
"version": "7.1.0.2",
"status": "affected"
},
{
"version": "7.2.0.1",
"status": "affected"
},
{
"version": "7.0.4",
"status": "affected"
},
{
"version": "7.2.1",
"status": "affected"
},
{
"version": "7.0.5",
"status": "affected"
},
{
"version": "7.3.0",
"status": "affected"
},
{
"version": "7.2.2",
"status": "affected"
},
{
"version": "7.2.3",
"status": "affected"
},
{
"version": "7.3.1",
"status": "affected"
},
{
"version": "7.1.0.3",
"status": "affected"
},
{
"version": "7.2.4",
"status": "affected"
},
{
"version": "7.0.6",
"status": "affected"
},
{
"version": "7.2.5",
"status": "affected"
},
{
"version": "7.2.4.1",
"status": "affected"
},
{
"version": "7.3.1.1",
"status": "affected"
},
{
"version": "7.4.0",
"status": "affected"
},
{
"version": "7.0.6.1",
"status": "affected"
},
{
"version": "7.2.5.1",
"status": "affected"
},
{
"version": "7.4.1",
"status": "affected"
},
{
"version": "7.2.6",
"status": "affected"
},
{
"version": "7.0.6.2",
"status": "affected"
},
{
"version": "7.4.1.1",
"status": "affected"
},
{
"version": "7.2.7",
"status": "affected"
},
{
"version": "7.2.5.2",
"status": "affected"
},
{
"version": "7.3.1.2",
"status": "affected"
},
{
"version": "7.2.8",
"status": "affected"
},
{
"version": "7.6.0",
"status": "affected"
},
{
"version": "7.4.2",
"status": "affected"
},
{
"version": "7.2.8.1",
"status": "affected"
},
{
"version": "7.0.6.3",
"status": "affected"
},
{
"version": "7.4.2.1",
"status": "affected"
},
{
"version": "7.2.9",
"status": "affected"
},
{
"version": "7.0.7",
"status": "affected"
},
{
"version": "7.7.0",
"status": "affected"
},
{
"version": "7.4.2.2",
"status": "affected"
},
{
"version": "7.2.10",
"status": "affected"
},
{
"version": "7.6.1",
"status": "affected"
},
{
"version": "7.4.2.3",
"status": "affected"
},
{
"version": "7.0.8",
"status": "affected"
},
{
"version": "7.6.2",
"status": "affected"
},
{
"version": "7.7.10",
"status": "affected"
},
{
"version": "7.0.8.1",
"status": "affected"
},
{
"version": "7.6.2.1",
"status": "affected"
},
{
"version": "7.7.10.1",
"status": "affected"
},
{
"version": "7.4.2.4",
"status": "affected"
},
{
"version": "7.2.10.2",
"status": "affected"
},
{
"version": "7.4.3",
"status": "affected"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco UTD SNORT IPS Engine Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "3.17.1S",
"status": "affected"
},
{
"version": "16.12.3",
"status": "affected"
},
{
"version": "Fuji-16.9.5",
"status": "affected"
},
{
"version": "16.12.4",
"status": "affected"
},
{
"version": "17.3.1a",
"status": "affected"
},
{
"version": "16.6.6",
"status": "affected"
},
{
"version": "16.12.2",
"status": "affected"
},
{
"version": "Fuji-16.9.6",
"status": "affected"
},
{
"version": "3.17.0S",
"status": "affected"
},
{
"version": "Fuji-16.9.3",
"status": "affected"
},
{
"version": "Denali-16.3.7",
"status": "affected"
},
{
"version": "Fuji-16.9.2",
"status": "affected"
},
{
"version": "Fuji-16.9.4",
"status": "affected"
},
{
"version": "Everest-16.6.4",
"status": "affected"
},
{
"version": "Everest-16.6.3",
"status": "affected"
},
{
"version": "16.6.5",
"status": "affected"
},
{
"version": "Denali-16.3.5",
"status": "affected"
},
{
"version": "17.2.1r",
"status": "affected"
},
{
"version": "17.1.1",
"status": "affected"
},
{
"version": "Everest-16.6.2",
"status": "affected"
},
{
"version": "16.6.7a",
"status": "affected"
},
{
"version": "Denali-16.3.4",
"status": "affected"
},
{
"version": "16.6.1",
"status": "affected"
},
{
"version": "Denali-16.3.9",
"status": "affected"
},
{
"version": "Denali-16.3.3",
"status": "affected"
},
{
"version": "16.12.1a",
"status": "affected"
},
{
"version": "17.3.2",
"status": "affected"
},
{
"version": "17.4.1a",
"status": "affected"
},
{
"version": "16.12.5",
"status": "affected"
},
{
"version": "17.5.1",
"status": "affected"
},
{
"version": "Fuji-16.9.7",
"status": "affected"
},
{
"version": "16.6.9",
"status": "affected"
},
{
"version": "17.3.3",
"status": "affected"
},
{
"version": "17.5.1a",
"status": "affected"
},
{
"version": "17.3.4",
"status": "affected"
},
{
"version": "17.3.4a",
"status": "affected"
},
{
"version": "17.4.2",
"status": "affected"
},
{
"version": "17.4.1b",
"status": "affected"
},
{
"version": "17.6.1a",
"status": "affected"
},
{
"version": "16.6.10",
"status": "affected"
},
{
"version": "17.7.1a",
"status": "affected"
},
{
"version": "16.12.6",
"status": "affected"
},
{
"version": "Fuji-16.9.8",
"status": "affected"
},
{
"version": "17.6.2",
"status": "affected"
},
{
"version": "17.8.1a",
"status": "affected"
},
{
"version": "16.12.7",
"status": "affected"
},
{
"version": "17.3.5",
"status": "affected"
},
{
"version": "17.6.3",
"status": "affected"
},
{
"version": "17.6.3a",
"status": "affected"
},
{
"version": "17.7.2",
"status": "affected"
},
{
"version": "17.9.1a",
"status": "affected"
},
{
"version": "17.6.4",
"status": "affected"
},
{
"version": "17.10.1a",
"status": "affected"
},
{
"version": "17.3.6",
"status": "affected"
},
{
"version": "16.12.8",
"status": "affected"
},
{
"version": "17.3.7",
"status": "affected"
},
{
"version": "17.9.2a",
"status": "affected"
},
{
"version": "17.6.5",
"status": "affected"
},
{
"version": "17.11.1a",
"status": "affected"
},
{
"version": "17.9.3a",
"status": "affected"
},
{
"version": "17.12.1a",
"status": "affected"
},
{
"version": "17.9.4",
"status": "affected"
},
{
"version": "17.6.6",
"status": "affected"
},
{
"version": "17.3.8",
"status": "affected"
},
{
"version": "17.3.8a",
"status": "affected"
},
{
"version": "17.6.6a",
"status": "affected"
},
{
"version": "17.9.4a",
"status": "affected"
},
{
"version": "17.12.2",
"status": "affected"
},
{
"version": "17.13.1a",
"status": "affected"
},
{
"version": "17.9.5a",
"status": "affected"
},
{
"version": "17.12.3",
"status": "affected"
},
{
"version": "17.6.7",
"status": "affected"
},
{
"version": "17.14.1a",
"status": "affected"
},
{
"version": "17.12.4",
"status": "affected"
},
{
"version": "17.12.3a",
"status": "affected"
},
{
"version": "17.15.1a",
"status": "affected"
},
{
"version": "17.6.8",
"status": "affected"
},
{
"version": "17.9.6",
"status": "affected"
},
{
"version": "17.6.8a",
"status": "affected"
},
{
"version": "17.16.1a",
"status": "affected"
},
{
"version": "17.9.5e",
"status": "affected"
},
{
"version": "17.12.4a",
"status": "affected"
},
{
"version": "17.15.2c",
"status": "affected"
},
{
"version": "17.9.5f",
"status": "affected"
},
{
"version": "17.12.4b",
"status": "affected"
},
{
"version": "17.15.2a",
"status": "affected"
},
{
"version": "17.12.5",
"status": "affected"
},
{
"version": "17.17.1",
"status": "affected"
},
{
"version": "17.12.5a",
"status": "affected"
},
{
"version": "17.9.7a",
"status": "affected"
},
{
"version": "17.15.3a",
"status": "affected"
},
{
"version": "17.15.3",
"status": "affected"
},
{
"version": "17.12.5b",
"status": "affected"
},
{
"version": "17.12.5c",
"status": "affected"
},
{
"version": "17.15.4",
"status": "affected"
},
{
"version": "17.9.7b",
"status": "affected"
},
{
"version": "17.18.1",
"status": "affected"
},
{
"version": "17.18.1a",
"status": "affected"
},
{
"version": "17.12.6",
"status": "affected"
},
{
"version": "17.9.8",
"status": "affected"
},
{
"version": "17.15.4c",
"status": "affected"
},
{
"version": "17.12.5d",
"status": "affected"
},
{
"version": "17.18.2",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-01-07T16:53:28.503254Z",
"id": "CVE-2026-20026",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-415"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH",
"source": "[email protected]"
}
]
}