Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	n/a	cisco-sa-snort3-misc-dos-6mB22qAK	Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities Cisco, SnortCisco Snort 3, Cisco Secure Firewall Threat Defense Software, Cisco UTD Snort IPS Engine for Cisco IOS XE Software, Cisco UTD Engine for Cisco IOS XE SD-WAN Software, Cisco Meraki MX Security Appliances, Snort	Cisco PSIRT	Oct 22 19:03 UTC
cisco-sa-snort3-misc-dos-6mB22qAKCVE-2026-20019CVE-2026-20179CVE-2026-20197CVE-2026-76489Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities Executive summary Multiple Cisco products are affected by four denial of service vulnerabilities in the Snort 3 Detection Engine, which can cause Snort 3 to restart and interrupt packet inspection. The advisory rates them Medium with a CVSS base score of 5.8, and Cisco has released software updates that fix them. Cisco states there are no workarounds, so customers should upgrade to a fixed release. Technical summary The flaws are caused by incomplete error checking when Snort 3 parses NetFlow (UDP), GRE, and Teredo packets, and by unreleased memory when Snort 3 processes a large number of files, which are classed under CWE-119, CWE-128, CWE-401, and CWE-835. An unauthenticated remote attacker can trigger a Snort 3 restart by sending a crafted packet or many files, and Snort 3 must be active for exploitation. Open Source Snort 3 is fixed in 3.12.4.0, UTD images for IOS XE are fixed in 17.12.8, 17.15.6, 17.18.5, 26.1.2, and 26.2.1, and the advisory gives Meraki fixes only as automatic updates with no version stated. No workarounds are available. The advisory states no detection guidance beyond instructions to check whether Snort 3 or UTD is running. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from sec.cloudapps.cisco.com/security/center…t3-misc-dos-6mB22qAK Score No CVSS score published. Affects Cisco Snort Cisco Snort 3 Cisco Secure Firewall Threat Defense Software Cisco UTD Snort IPS Engine for Cisco IOS XE Software Cisco UTD Engine for Cisco IOS XE SD-WAN Software Cisco Meraki MX Security Appliances Snort Cisco Product Security Incident Response TeamPublished Oct 22, 2026 19:03 UTC Read the advisory
	Medium	n/a	cisco-sa-snort3-gtpcodec-dos-Rmecfepz	Multiple Cisco Products Snort 3 Denial of Service Vulnerability Cisco, SnortCisco Open Source Snort3, Cisco Secure Firewall Threat Defense Software, Cisco UTD Snort IPS Engine for Cisco IOS XE Software, Cisco UTD Engine for Cisco IOS XE SD-WAN Software, Cisco Meraki MX Security Appliances, Snort 3	Cisco PSIRT	Oct 22 19:03 UTC
cisco-sa-snort3-gtpcodec-dos-RmecfepzCVE-2026-76445Multiple Cisco Products Snort 3 Denial of Service Vulnerability Executive summary Multiple Cisco products are affected by a denial of service flaw in the Snort 3 Detection Engine, including Open Source Snort 3, Cisco Secure Firewall Threat Defense Software, UTD on Cisco IOS XE Software, and Cisco Meraki MX Security Appliances. An unauthenticated remote attacker could crash or stall the detection engine, and Cisco rates the advisory Medium with a base CVSS score of 5.3. Cisco recommends upgrading to the fixed software versions listed in the advisory, and no workarounds are available. Technical summary The flaw is classified as CWE-835 (loop with unreachable exit condition, infinite loop) in the Snort 3 codec that handles GPRS Tunneling Protocol (GTP) extension headers. An unauthenticated remote attacker can send a crafted, fragmented UDP datagram containing these headers to an affected device running Snort 3, causing the detection engine to enter an infinite loop and restart or stall. Snort 3 must be active for exploitation, and Snort 2 is not affected. The fixed Open Source Snort 3 release is 3.12.4.0, and the advisory lists fixed UTD on IOS XE releases of 17.12.8, 17.15.6, 17.18.5, 26.1.2, and 26.2.1. The advisory states that there are no workarounds. Detection guidance beyond checking whether Snort 3 or UTD is running is not stated, and fixed Secure Firewall Threat Defense versions are not listed in the text provided, so readers should use the Cisco Software Checker. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:X. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from sec.cloudapps.cisco.com/security/center…tpcodec-dos-Rmecfepz Score No CVSS score published. Affects Cisco Snort Cisco Open Source Snort3 Cisco Secure Firewall Threat Defense Software Cisco UTD Snort IPS Engine for Cisco IOS XE Software Cisco UTD Engine for Cisco IOS XE SD-WAN Software Cisco Meraki MX Security Appliances Snort 3 Cisco Product Security Incident Response TeamPublished Oct 22, 2026 19:03 UTC Read the advisory
	Medium	n/a	cisco-sa-snort3-vba-bufdos-jAuFdvn9	Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability Cisco, SnortCisco Open Source Snort3, Cisco Secure Firewall Threat Defense Software, Cisco UTD Snort IPS Engine for Cisco IOS XE Software, Cisco UTD Engine for Cisco IOS XE SD-WAN Software, Cisco 8100 Series Secure Routers, Cisco 8200 Series Secure Routers, Cisco 8300 Series Secure Routers, Cisco 8400 Series Secure Routers, Cisco Catalyst 8000V Edge Software, Cisco Catalyst 8200 Series Edge Platforms, Cisco Catalyst 8300 Series Edge Platforms, Cisco Catalyst 8500L Edge Platforms, Cisco Catalyst IR1800 Rugged Series Routers, Cisco Catalyst IR8340 Rugged Routers, Cisco Cloud Services Routers 1000V, Cisco Integrated Services Virtual Routers, Snort, Cisco 1000 Series Integrated Services Routers (ISRs), Cisco 4000 Series ISRs	Cisco PSIRT	Oct 22 19:03 UTC
cisco-sa-snort3-vba-bufdos-jAuFdvn9CVE-2026-20218Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability Executive summary A flaw in the Snort 3 Visual Basic for Applications decompression engine affects Open Source Snort 3, Cisco Secure Firewall Threat Defense software when Snort 3 and VBA decompression are configured, and Unified Threat Defense on several Cisco IOS XE routers and gateways. An unauthenticated remote attacker can crash the Snort 3 detection engine by sending crafted VBA data, causing denial of service. Cisco rates the advisory Medium with a CVSS base score of 5.8, and recommends upgrading to a fixed release, with a workaround of disabling VBA decompression available until then. Technical summary The vulnerability is a buffer overflow (CWE-121) caused by improper range checking when Snort 3 decompresses user-controlled VBA data, and it can be triggered by an unauthenticated remote attacker sending crafted VBA data to a targeted device. A successful exploit causes a stack data overflow that restarts the Snort 3 Detection Engine, resulting in denial of service. Exploitation requires Snort 3 to be active, and for Secure FTD, at least one Snort 3 detector configured for VBA macro decompression, which is not enabled by default and applies to IMAP, SMTP, HTTP, and POP3 inspectors. Fixed releases are stated as Open Source Snort 3.12.4.0 and, for UTD on IOS XE, 17.12.8, 17.15.6, 17.18.5, 26.1.2, and 26.2.1; no fixed Secure FTD release is stated in the advisory, which directs users to the Cisco Software Checker. The workaround is to disable VBA decompression, and the advisory does not state any detection guidance beyond checking the Snort version and UTD status commands. Cisco reports no known public announcements or malicious use, and the CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L/E:X/RL:X/RC:X. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from sec.cloudapps.cisco.com/security/center…-vba-bufdos-jAuFdvn9 Score No CVSS score published. Affects Cisco Snort Cisco Open Source Snort3 Cisco Secure Firewall Threat Defense Software Cisco UTD Snort IPS Engine for Cisco IOS XE Software Cisco UTD Engine for Cisco IOS XE SD-WAN Software Cisco 8100 Series Secure Routers Cisco 8200 Series Secure Routers Cisco 8300 Series Secure Routers Cisco 8400 Series Secure Routers Cisco Catalyst 8000V Edge Software Cisco Catalyst 8200 Series Edge Platforms Cisco Catalyst 8300 Series Edge Platforms Cisco Catalyst 8500L Edge Platforms Cisco Catalyst IR1800 Rugged Series Routers Cisco Catalyst IR8340 Rugged Routers Cisco Cloud Services Routers 1000V Cisco Integrated Services Virtual Routers Snort Cisco 1000 Series Integrated Services Routers (ISRs)Cisco 4000 Series ISRs Cisco Product Security Incident Response TeamPublished Oct 22, 2026 19:03 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Score

Affects

Executive summary

Technical summary

Score

Affects

Executive summary

Technical summary

Score

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee