CVE-2026-20005Medium· 5.8▾ SunlitMultiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspect…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 31.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
0.5% → 0.5%
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete parsing of the SSL handshake ingress packets. An attacker could exploit this vulnerability by sending crafted SSL handshake packets. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine restarts unexpectedly.
cyber_vision = 3.0.0cyber_vision = 3.0.1cyber_vision = 3.0.2cyber_vision = 3.0.3cyber_vision = 3.0.4cyber_vision = 3.0.5cyber_vision = 3.0.6cyber_vision = 3.1.0cyber_vision = 3.1.1cyber_vision = 3.1.2cyber_vision = 3.2.0cyber_vision = 3.2.1cyber_vision = 3.2.2cyber_vision = 3.2.3cyber_vision = 3.2.4cyber_vision = 4.0.0cyber_vision = 4.0.1cyber_vision = 4.0.2cyber_vision = 4.0.3cyber_vision = 4.1.0cyber_vision = 4.1.1cyber_vision = 4.1.2cyber_vision = 4.1.3cyber_vision = 4.1.4cyber_vision = 4.1.5cyber_vision = 4.1.6cyber_vision = 4.1.7cyber_vision = 4.2.0cyber_vision = 4.2.1cyber_vision = 4.2.2cyber_vision = 4.2.3cyber_vision = 4.2.4cyber_vision = 4.2.6cyber_vision = 4.3.0cyber_vision = 4.3.1cyber_vision = 4.3.2cyber_vision = 4.3.3cyber_vision = 4.4.0cyber_vision = 4.4.1cyber_vision = 4.4.2cyber_vision = 4.4.3cyber_vision = 5.0.0cyber_vision = 5.0.1cyber_vision = 5.0.2cyber_vision = 5.1.0cyber_vision = 5.1.1cyber_vision = 5.1.2cyber_vision = 5.1.3cyber_vision = 5.2.0cyber_vision = 5.2.1cyber_vision = 5.3.0cyber_vision = 5.3.1cyber_vision = 5.3.2secure_firewall_threat_defense = 7.6.0secure_firewall_threat_defense = 7.6.1secure_firewall_threat_defense = 7.6.2secure_firewall_threat_defense = 7.6.2.1secure_firewall_threat_defense = 7.7.0secure_firewall_threat_defense = 7.7.10secure_firewall_threat_defense = 7.7.10.1unified_threat_defense_snort_intrusion_prevention_system_engine = 17.9.4unified_threat_defense_snort_intrusion_prevention_system_engine = 17.9.5eunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.1aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.2unified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.3unified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.3aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.4unified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.4aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.4bunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.5unified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.5aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.5bunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.5cunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.5dunified_threat_defense_snort_intrusion_prevention_system_engine = 17.12.6unified_threat_defense_snort_intrusion_prevention_system_engine = 17.13.1aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.14.1aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.15.1aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.15.2aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.15.2cunified_threat_defense_snort_intrusion_prevention_system_engine = 17.15.3unified_threat_defense_snort_intrusion_prevention_system_engine = 17.15.3aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.15.4unified_threat_defense_snort_intrusion_prevention_system_engine = 17.15.4cunified_threat_defense_snort_intrusion_prevention_system_engine = 17.16.1aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.17.1unified_threat_defense_snort_intrusion_prevention_system_engine = 17.18.1unified_threat_defense_snort_intrusion_prevention_system_engine = 17.18.1aunified_threat_defense_snort_intrusion_prevention_system_engine = 17.18.2snort >= 3.0.0-233, < 3.9.2.0Upgrade past the affected range:
snort 3.9.2.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-20321Medium· 6.5A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user
CVE-2026-76471Critical· 9.8A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The…
CVE-2026-76486Critical· 9.8A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Deni…
CVE-2026-76485Critical· 9.8A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Deni…
CVE-2026-76501Critical· 9.8A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root…
CVE-2026-76498Critical· 9.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review