Medium severity · published Mar 4, 2026
CVE-2026-20058
Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability
5.8
CVSS
0.4%
EPSS
No
On KEV
Description
Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cisco Secure Firewall Threat Defense (FTD) Software · Cisco
7.2.0; 7.2.0.1; 7.2.1; 7.3.0; 7.2.2; 7.2.3; +31 more · source: vendor
CU
Cisco UTD SNORT IPS Engine Software · Cisco
17.9.3a; 17.12.1a; 17.12.2; 17.13.1a; 17.9.5a; 17.12.3; +24 more · source: vendor
SF
Secure Firewall Threat Defense · Cisco
7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +31 more · source: NVD
SN
Snort · Cisco
3.0.0-233 before 3.9.6.0 · source: NVD
UT
Unified Threat Defense Snort Intrusion Prevention System Engine · Cisco
17.9.3a; 17.9.5a; 17.9.6; 17.12.1a; 17.12.2; 17.12.3; +24 more · source: NVD
Affected product
CS
Cisco Secure Firewall Threat Defense (FTD) Software
Cisco
More from Cisco Secure Firewall Threat Defense (FTD) Software
9.9
CVE-2025-20333
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
8.6
CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
8.6
CVE-2025-20362
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
9.9
CVE-2026-20332
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities
9.9
CVE-2026-20330
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities