CVE-2026-20054

Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Infinite Loop Denial of Service Vulnerability

State: Published
Severity: 5.8 Medium
Published: Mar 4, 2026
Updated: Mar 4, 2026
Reserved: Oct 8, 2025

Read the record on cve.org

Description

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. 

This vulnerability is due to improper error checking when decompressing VBA data. An attacker could exploit this vulnerability by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to enter an infinite loop, causing a DoS condition.

Scores

CVSS	Score	Vector	Source
3.1	5.8 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L	cisco

Weaknesses

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

Affected Products

Product	Versions
Cisco Cyber VisionCisco	3.0.0Affected 3.0.2Affected 3.0.3Affected 3.0.1Affected 3.1.0Affected 3.0.4Affected 3.1.1Affected 3.1.2Affected 3.2.0Affected 3.0.5Affected 3.2.1Affected 3.0.6Affected 3.2.2Affected 3.2.3Affected 3.2.4Affected 4.0.0Affected 4.0.1Affected 4.0.2Affected 4.0.3Affected 4.1.0Affected 4.1.1Affected 4.1.2Affected 4.1.3Affected 4.1.4Affected 4.2.0Affected and 29 more versions
Cisco Secure Firewall Threat Defense (FTD) SoftwareCisco	7.2.0Affected 7.2.0.1Affected 7.2.1Affected 7.3.0Affected 7.2.2Affected 7.2.3Affected 7.3.1Affected 7.2.4Affected 7.2.5Affected 7.2.4.1Affected 7.3.1.1Affected 7.4.0Affected 7.2.5.1Affected 7.4.1Affected 7.2.6Affected 7.4.1.1Affected 7.2.7Affected 7.2.5.2Affected 7.3.1.2Affected 7.2.8Affected 7.6.0Affected 7.4.2Affected 7.2.8.1Affected 7.4.2.1Affected 7.2.9Affected and 12 more versions
Cisco UTD SNORT IPS Engine SoftwareCisco	3.17.1SAffected 16.12.3Affected Fuji-16.9.5Affected 16.12.4Affected 17.3.1aAffected 16.6.6Affected 16.12.2Affected Fuji-16.9.6Affected 3.17.0SAffected Fuji-16.9.3Affected Denali-16.3.7Affected Fuji-16.9.2Affected Fuji-16.9.4Affected Everest-16.6.4Affected Everest-16.6.3Affected 16.6.5Affected Denali-16.3.5Affected 17.2.1rAffected 17.1.1Affected Everest-16.6.2Affected 16.6.7aAffected Denali-16.3.4Affected 16.6.1Affected Denali-16.3.9Affected Denali-16.3.3Affected and 78 more versions

References

cisco-sa-ftd-snort3-vbavuls-96UcVVed

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.