CVE-2026-20218
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper range checking when Snort 3 decompresses VBA data, which is user controlled. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine of a targeted device. A successful exploit could allow the attacker to cause an overflow of stack data, which could result in a DoS condition.
Severity
MEDIUM
CVSS score
5.8
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-10-21 17:18:27.733000
Last modified
2026-10-22 19:17:51.960000
View original CVE JSON
{
"id": "CVE-2026-20218",
"sourceIdentifier": "[email protected]",
"published": "2026-10-21T17:18:27.733",
"lastModified": "2026-10-22T19:17:51.960",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. \r\n\r\nThis vulnerability is due to improper range checking when Snort 3 decompresses VBA data, which is user controlled. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine of a targeted device. A successful exploit could allow the attacker to cause an overflow of stack data, which could result in a DoS condition."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Open Source Snort3",
"defaultStatus": "unknown",
"versions": [
{
"version": "3.12.2.0",
"status": "affected"
},
{
"version": "3.1.2.0",
"status": "affected"
},
{
"version": "3.1.3.0",
"status": "affected"
},
{
"version": "3.1.4.0",
"status": "affected"
},
{
"version": "3.1.5.0",
"status": "affected"
},
{
"version": "3.1.6.0",
"status": "affected"
},
{
"version": "3.1.7.0",
"status": "affected"
},
{
"version": "3.1.8.0",
"status": "affected"
},
{
"version": "3.1.9.0",
"status": "affected"
},
{
"version": "3.1.10.0",
"status": "affected"
},
{
"version": "3.1.12.0",
"status": "affected"
},
{
"version": "3.1.13.0",
"status": "affected"
},
{
"version": "3.1.14.0",
"status": "affected"
},
{
"version": "3.1.15.0",
"status": "affected"
},
{
"version": "3.1.16.0",
"status": "affected"
},
{
"version": "3.1.17.0",
"status": "affected"
},
{
"version": "3.1.18.0",
"status": "affected"
},
{
"version": "3.1.19.0",
"status": "affected"
},
{
"version": "3.1.20.0",
"status": "affected"
},
{
"version": "3.1.21.0",
"status": "affected"
},
{
"version": "3.1.22.0",
"status": "affected"
},
{
"version": "3.1.23.0",
"status": "affected"
},
{
"version": "3.1.24.0",
"status": "affected"
},
{
"version": "3.1.25.0",
"status": "affected"
},
{
"version": "3.1.27.0",
"status": "affected"
},
{
"version": "3.1.28.0",
"status": "affected"
},
{
"version": "3.1.29.0",
"status": "affected"
},
{
"version": "3.1.30.0",
"status": "affected"
},
{
"version": "3.1.31.0",
"status": "affected"
},
{
"version": "3.1.32.0",
"status": "affected"
},
{
"version": "3.1.36.0",
"status": "affected"
},
{
"version": "3.1.38.0",
"status": "affected"
},
{
"version": "3.1.39.0",
"status": "affected"
},
{
"version": "3.1.40.0",
"status": "affected"
},
{
"version": "3.1.41.0",
"status": "affected"
},
{
"version": "3.1.42.0",
"status": "affected"
},
{
"version": "3.1.43.0",
"status": "affected"
},
{
"version": "3.1.45.0",
"status": "affected"
},
{
"version": "3.1.47.0",
"status": "affected"
},
{
"version": "3.1.48.0",
"status": "affected"
},
{
"version": "3.1.50.0",
"status": "affected"
},
{
"version": "3.1.51.0",
"status": "affected"
},
{
"version": "3.1.52.0",
"status": "affected"
},
{
"version": "3.1.53.0",
"status": "affected"
},
{
"version": "3.1.55.0",
"status": "affected"
},
{
"version": "3.1.56.0",
"status": "affected"
},
{
"version": "3.1.57.0",
"status": "affected"
},
{
"version": "3.1.58.0",
"status": "affected"
},
{
"version": "3.1.59.0",
"status": "affected"
},
{
"version": "3.1.60.0",
"status": "affected"
},
{
"version": "3.1.61.0",
"status": "affected"
},
{
"version": "3.1.62.0",
"status": "affected"
},
{
"version": "3.1.63.0",
"status": "affected"
},
{
"version": "3.1.64.0",
"status": "affected"
},
{
"version": "3.1.65.0",
"status": "affected"
},
{
"version": "3.1.66.0",
"status": "affected"
},
{
"version": "3.1.67.0",
"status": "affected"
},
{
"version": "3.1.69.0",
"status": "affected"
},
{
"version": "3.1.70.0",
"status": "affected"
},
{
"version": "3.1.71.0",
"status": "affected"
},
{
"version": "3.1.72.0",
"status": "affected"
},
{
"version": "3.1.73.0",
"status": "affected"
},
{
"version": "3.1.74.0",
"status": "affected"
},
{
"version": "3.1.75.0",
"status": "affected"
},
{
"version": "3.1.76.0",
"status": "affected"
},
{
"version": "3.1.77.0",
"status": "affected"
},
{
"version": "3.1.78.0",
"status": "affected"
},
{
"version": "3.1.81.0",
"status": "affected"
},
{
"version": "3.1.82.0",
"status": "affected"
},
{
"version": "3.1.83.0",
"status": "affected"
},
{
"version": "3.1.84.0",
"status": "affected"
},
{
"version": "3.2.1.0",
"status": "affected"
},
{
"version": "3.2.2.0",
"status": "affected"
},
{
"version": "3.3.0.0",
"status": "affected"
},
{
"version": "3.3.1.0",
"status": "affected"
},
{
"version": "3.3.2.0",
"status": "affected"
},
{
"version": "3.3.3.0",
"status": "affected"
},
{
"version": "3.3.4.0",
"status": "affected"
},
{
"version": "3.3.5.0",
"status": "affected"
},
{
"version": "3.3.7.0",
"status": "affected"
},
{
"version": "3.5.0.0",
"status": "affected"
},
{
"version": "3.5.1.0",
"status": "affected"
},
{
"version": "3.8.1.0",
"status": "affected"
},
{
"version": "3.6.0.0",
"status": "affected"
},
{
"version": "3.6.2.0",
"status": "affected"
},
{
"version": "3.9.3.0",
"status": "affected"
},
{
"version": "3.7.2.0",
"status": "affected"
},
{
"version": "3.7.0.0",
"status": "affected"
},
{
"version": "3.9.6.0",
"status": "affected"
},
{
"version": "3.10.0.0",
"status": "affected"
},
{
"version": "3.10.2.0",
"status": "affected"
},
{
"version": "3.7.4.0",
"status": "affected"
},
{
"version": "3.9.0.0",
"status": "affected"
},
{
"version": "3.5.2.0",
"status": "affected"
},
{
"version": "3.12.1.0",
"status": "affected"
},
{
"version": "3.6.1.0",
"status": "affected"
},
{
"version": "3.9.2.0",
"status": "affected"
},
{
"version": "3.6.3.0",
"status": "affected"
},
{
"version": "3.9.5.0",
"status": "affected"
},
{
"version": "3.7.1.0",
"status": "affected"
},
{
"version": "3.9.7.0",
"status": "affected"
},
{
"version": "3.7.3.0",
"status": "affected"
},
{
"version": "3.10.1.0",
"status": "affected"
},
{
"version": "3.9.1.0",
"status": "affected"
},
{
"version": "3.11.1.0",
"status": "affected"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "7.2.0",
"status": "affected"
},
{
"version": "7.2.0.1",
"status": "affected"
},
{
"version": "7.2.1",
"status": "affected"
},
{
"version": "7.3.0",
"status": "affected"
},
{
"version": "7.2.2",
"status": "affected"
},
{
"version": "7.2.3",
"status": "affected"
},
{
"version": "7.3.1",
"status": "affected"
},
{
"version": "7.2.4",
"status": "affected"
},
{
"version": "7.2.5",
"status": "affected"
},
{
"version": "7.2.4.1",
"status": "affected"
},
{
"version": "7.3.1.1",
"status": "affected"
},
{
"version": "7.4.0",
"status": "affected"
},
{
"version": "7.2.5.1",
"status": "affected"
},
{
"version": "7.4.1",
"status": "affected"
},
{
"version": "7.2.6",
"status": "affected"
},
{
"version": "7.4.1.1",
"status": "affected"
},
{
"version": "7.2.7",
"status": "affected"
},
{
"version": "7.2.5.2",
"status": "affected"
},
{
"version": "7.3.1.2",
"status": "affected"
},
{
"version": "7.2.8",
"status": "affected"
},
{
"version": "7.6.0",
"status": "affected"
},
{
"version": "7.4.2",
"status": "affected"
},
{
"version": "7.2.8.1",
"status": "affected"
},
{
"version": "7.4.2.1",
"status": "affected"
},
{
"version": "7.2.9",
"status": "affected"
},
{
"version": "7.7.0",
"status": "affected"
},
{
"version": "7.4.2.2",
"status": "affected"
},
{
"version": "7.2.10",
"status": "affected"
},
{
"version": "7.6.1",
"status": "affected"
},
{
"version": "7.4.2.3",
"status": "affected"
},
{
"version": "7.6.2",
"status": "affected"
},
{
"version": "7.7.10",
"status": "affected"
},
{
"version": "7.7.11",
"status": "affected"
},
{
"version": "7.6.2.1",
"status": "affected"
},
{
"version": "7.7.10.1",
"status": "affected"
},
{
"version": "7.4.2.4",
"status": "affected"
},
{
"version": "7.2.10.2",
"status": "affected"
},
{
"version": "7.4.3",
"status": "affected"
},
{
"version": "7.6.4",
"status": "affected"
},
{
"version": "10.0.0",
"status": "affected"
},
{
"version": "7.4.4",
"status": "affected"
},
{
"version": "7.2.11",
"status": "affected"
},
{
"version": "7.4.7",
"status": "affected"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco UTD SNORT IPS Engine Software",
"defaultStatus": "unknown",
"versions": [
{
"version": "17.12.1a",
"status": "affected"
},
{
"version": "17.12.2",
"status": "affected"
},
{
"version": "17.13.1a",
"status": "affected"
},
{
"version": "17.12.3",
"status": "affected"
},
{
"version": "17.14.1a",
"status": "affected"
},
{
"version": "17.12.4",
"status": "affected"
},
{
"version": "17.12.3a",
"status": "affected"
},
{
"version": "17.15.1a",
"status": "affected"
},
{
"version": "17.16.1a",
"status": "affected"
},
{
"version": "17.12.4a",
"status": "affected"
},
{
"version": "17.15.2c",
"status": "affected"
},
{
"version": "17.12.4b",
"status": "affected"
},
{
"version": "17.15.2a",
"status": "affected"
},
{
"version": "17.12.5",
"status": "affected"
},
{
"version": "17.17.1",
"status": "affected"
},
{
"version": "17.12.5a",
"status": "affected"
},
{
"version": "17.15.3a",
"status": "affected"
},
{
"version": "17.15.3",
"status": "affected"
},
{
"version": "17.12.5b",
"status": "affected"
},
{
"version": "17.12.5c",
"status": "affected"
},
{
"version": "17.15.4",
"status": "affected"
},
{
"version": "17.18.1",
"status": "affected"
},
{
"version": "17.18.1a",
"status": "affected"
},
{
"version": "17.12.6",
"status": "affected"
},
{
"version": "17.15.4c",
"status": "affected"
},
{
"version": "17.12.5d",
"status": "affected"
},
{
"version": "17.18.2",
"status": "affected"
},
{
"version": "26.1.1",
"status": "affected"
},
{
"version": "17.15.5",
"status": "affected"
},
{
"version": "17.15.5a",
"status": "affected"
},
{
"version": "17.12.7",
"status": "affected"
},
{
"version": "17.12.7a",
"status": "affected"
},
{
"version": "17.12.7b",
"status": "affected"
},
{
"version": "17.18.3a",
"status": "affected"
},
{
"version": "17.12.8",
"status": "affected"
},
{
"version": "17.15.6",
"status": "affected"
},
{
"version": "17.18.4",
"status": "affected"
},
{
"version": "26.1.2",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-21T17:17:50.554759Z",
"id": "CVE-2026-20218",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-vba-bufdos-jAuFdvn9",
"source": "[email protected]"
}
]
}