Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | n/a | cisco-sa-snort3-mime-vulns-bkXjcKkt |
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
CiscoCisco Snort 3, Cisco Secure Firewall Threat Defense Software, Cisco UTD Snort IPS Engine for Cisco IOS XE Software, Cisco UTD Engine for Cisco IOS XE SD-WAN Software, Cisco 1000 Series Integrated Services Routers, Cisco 8100 Series Secure Routers, Cisco 8200 Series Secure Routers, Cisco 8300 Series Secure Routers, Cisco 8400 Series Secure Routers, Cisco Catalyst 8000V Edge Software, Cisco Catalyst 8200 Series Edge Platforms, Cisco Catalyst 8300 Series Edge Platforms, Cisco Catalyst 8500L Edge Platforms, Cisco Catalyst IR1800 Rugged Series Routers, Cisco Catalyst IR8340 Rugged Routers, Cisco Cloud Services Routers 1000V, Cisco Integrated Services Virtual Routers, Cisco Meraki MX Security Appliances
|
Cisco PSIRT | |||
|
cisco-sa-snort3-mime-vulns-bkXjcKktCVE-2026-20011Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
Executive summaryMultiple Cisco products are affected by a Snort 3 SMTP MIME vulnerability that an unauthenticated remote attacker could use to make the Snort 3 Detection Engine restart, causing a denial of service. The advisory rates it Medium with a base CVSS score of 5.8, and Cisco has released software updates to fix it; no workarounds are available. Affected products include Open Source Snort 3, Cisco Secure Firewall Threat Defense software when Snort 3 is configured, and certain Cisco IOS XE and Meraki MX devices running vulnerable UTD or Meraki releases. Technical summaryThe flaw is a lack of error checking when MIME fields of SMTP headers are parsed by the Snort 3 SMTP MIME Decoder, which is a denial of service issue (CWE-805, CVE-2026-20011). An unauthenticated remote attacker can exploit it by sending crafted SMTP packets over an established connection, and Snort 3 must be active on Cisco Secure FTD for exploitation. The advisory lists fixed Open Source Snort 3 release 3.10.1.0 and 3.12.4.0, and fixed UTD on Cisco IOS XE releases 17.12.8, 17.15.6, 17.18.5, 26.1.2, and 26.2.1; fixed Cisco Secure FTD and Meraki versions are not stated in the text beyond the Software Checker reference. No workarounds exist, and the advisory gives no specific detection guidance beyond checking whether Snort 3 or UTD is active using the listed show command. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: Cisco 4000 Series Integrated Services Routers Summarized from sec.cloudapps.cisco.com/security/center…-mime-vulns-bkXjcKkt ScoreNo CVSS score published. AffectsCiscoCisco Snort 3Cisco Secure Firewall Threat Defense SoftwareCisco UTD Snort IPS Engine for Cisco IOS XE SoftwareCisco UTD Engine for Cisco IOS XE SD-WAN SoftwareCisco 1000 Series Integrated Services RoutersCisco 8100 Series Secure RoutersCisco 8200 Series Secure RoutersCisco 8300 Series Secure RoutersCisco 8400 Series Secure RoutersCisco Catalyst 8000V Edge SoftwareCisco Catalyst 8200 Series Edge PlatformsCisco Catalyst 8300 Series Edge PlatformsCisco Catalyst 8500L Edge PlatformsCisco Catalyst IR1800 Rugged Series RoutersCisco Catalyst IR8340 Rugged RoutersCisco Cloud Services Routers 1000VCisco Integrated Services Virtual RoutersCisco Meraki MX Security Appliances
Cisco Product Security Incident Response TeamPublished
Read the advisory
|
|||||||
| Critical | n/a | cisco-sa-hardening-snort3-ybgmhTQe |
Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
CiscoCisco Snort 3
|
Cisco PSIRT | |||
|
cisco-sa-hardening-snort3-ybgmhTQeCVE-2026-20043CVE-2026-20236CVE-2026-20291CVE-2026-20356Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
Executive summaryCisco reports a set of hardening fixes for its open source Snort 3 software, used in several Cisco products, that address multiple internally discovered vulnerabilities. The advisory rates the security impact as Critical and says the flaws were found in internal testing and are not known to be actively exploited. Cisco has released software updates to address them and states there are no workarounds. Technical summaryThe advisory groups the issues by weakness class and lists CVE-2026-20043 as covering out-of-bounds writes classified under CWE-787. The other listed identifiers are CVE-2026-20236, CVE-2026-20291, and CVE-2026-20356, but the advisory does not describe their individual details beyond the grouping. Attack vector, required privileges, and authentication preconditions are not stated. Affected product versions and fixed software versions are not stated in the text provided, and the advisory points to a separate Cisco document for those details. Cisco states that no workarounds address these vulnerabilities, and no detection guidance is given. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. ScoreNo CVSS score published. Affects
Cisco Product Security Incident Response TeamPublished
Read the advisory
|
|||||||
| Medium | n/a | cisco-sa-snort3-misc-dos-6mB22qAK |
Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
Cisco, SnortCisco Snort 3, Cisco Secure Firewall Threat Defense Software, Cisco UTD Snort IPS Engine for Cisco IOS XE Software, Cisco UTD Engine for Cisco IOS XE SD-WAN Software, Cisco Meraki MX Security Appliances, Snort
|
Cisco PSIRT | |||
|
cisco-sa-snort3-misc-dos-6mB22qAKCVE-2026-20019CVE-2026-20179CVE-2026-20197CVE-2026-76489Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
Executive summaryMultiple Cisco products are affected by four denial of service vulnerabilities in the Snort 3 Detection Engine, which can cause Snort 3 to restart and interrupt packet inspection. The advisory rates them Medium with a CVSS base score of 5.8, and Cisco has released software updates that fix them. Cisco states there are no workarounds, so customers should upgrade to a fixed release. Technical summaryThe flaws are caused by incomplete error checking when Snort 3 parses NetFlow (UDP), GRE, and Teredo packets, and by unreleased memory when Snort 3 processes a large number of files, which are classed under CWE-119, CWE-128, CWE-401, and CWE-835. An unauthenticated remote attacker can trigger a Snort 3 restart by sending a crafted packet or many files, and Snort 3 must be active for exploitation. Open Source Snort 3 is fixed in 3.12.4.0, UTD images for IOS XE are fixed in 17.12.8, 17.15.6, 17.18.5, 26.1.2, and 26.2.1, and the advisory gives Meraki fixes only as automatic updates with no version stated. No workarounds are available. The advisory states no detection guidance beyond instructions to check whether Snort 3 or UTD is running. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from sec.cloudapps.cisco.com/security/center…t3-misc-dos-6mB22qAK ScoreNo CVSS score published. AffectsCiscoSnortCisco Snort 3Cisco Secure Firewall Threat Defense SoftwareCisco UTD Snort IPS Engine for Cisco IOS XE SoftwareCisco UTD Engine for Cisco IOS XE SD-WAN SoftwareCisco Meraki MX Security AppliancesSnort
Cisco Product Security Incident Response TeamPublished
Read the advisory
|
|||||||
| Medium | n/a | cisco-sa-snort3-gre-JNpMHrTv |
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
CiscoCisco Snort 3
|
Cisco PSIRT | |||
|
cisco-sa-snort3-gre-JNpMHrTvCVE-2026-20221Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
Executive summarySeveral Cisco products are affected by a flaw in the Snort 3 Detection Engine's handling of nested GRE tunnel traffic. An unauthenticated remote attacker can crash the engine, causing a bypass or denial of service depending on device configuration; Cisco rates it Medium and has released software updates. Technical summaryThe flaw is improper handling of nested GRE traffic in the GRE decapsulation feature of Snort 3, which can cause an unexpected restart of the Snort 3 engine. An unauthenticated remote attacker exploits it by sending a crafted GRE payload through an affected device; no other preconditions are stated. The Snort 3 engine restarts automatically with no manual intervention. Cisco has released software updates, but the specific affected and fixed software versions are not stated in this text and must be taken from the full advisory. The advisory states there are no workarounds. Detection guidance is not stated, and exploitation in the wild is not stated. The Security Impact Rating is Medium and the CVE is CVE-2026-20221. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. ScoreNo CVSS score published. Affects
Cisco Product Security Incident Response TeamPublished
Read the advisory
|
|||||||
| Medium | n/a | cisco-sa-snort3-gtpcodec-dos-Rmecfepz |
Multiple Cisco Products Snort 3 Denial of Service Vulnerability
Cisco, SnortCisco Open Source Snort3, Cisco Secure Firewall Threat Defense Software, Cisco UTD Snort IPS Engine for Cisco IOS XE Software, Cisco UTD Engine for Cisco IOS XE SD-WAN Software, Cisco Meraki MX Security Appliances, Snort 3
|
Cisco PSIRT | |||
|
cisco-sa-snort3-gtpcodec-dos-RmecfepzCVE-2026-76445Multiple Cisco Products Snort 3 Denial of Service Vulnerability
Executive summaryMultiple Cisco products are affected by a denial of service flaw in the Snort 3 Detection Engine, including Open Source Snort 3, Cisco Secure Firewall Threat Defense Software, UTD on Cisco IOS XE Software, and Cisco Meraki MX Security Appliances. An unauthenticated remote attacker could crash or stall the detection engine, and Cisco rates the advisory Medium with a base CVSS score of 5.3. Cisco recommends upgrading to the fixed software versions listed in the advisory, and no workarounds are available. Technical summaryThe flaw is classified as CWE-835 (loop with unreachable exit condition, infinite loop) in the Snort 3 codec that handles GPRS Tunneling Protocol (GTP) extension headers. An unauthenticated remote attacker can send a crafted, fragmented UDP datagram containing these headers to an affected device running Snort 3, causing the detection engine to enter an infinite loop and restart or stall. Snort 3 must be active for exploitation, and Snort 2 is not affected. The fixed Open Source Snort 3 release is 3.12.4.0, and the advisory lists fixed UTD on IOS XE releases of 17.12.8, 17.15.6, 17.18.5, 26.1.2, and 26.2.1. The advisory states that there are no workarounds. Detection guidance beyond checking whether Snort 3 or UTD is running is not stated, and fixed Secure Firewall Threat Defense versions are not listed in the text provided, so readers should use the Cisco Software Checker. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:X. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from sec.cloudapps.cisco.com/security/center…tpcodec-dos-Rmecfepz ScoreNo CVSS score published. AffectsCiscoSnortCisco Open Source Snort3Cisco Secure Firewall Threat Defense SoftwareCisco UTD Snort IPS Engine for Cisco IOS XE SoftwareCisco UTD Engine for Cisco IOS XE SD-WAN SoftwareCisco Meraki MX Security AppliancesSnort 3
Cisco Product Security Incident Response TeamPublished
Read the advisory
|
|||||||