CVE-2026-20236
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.
- Score
- CVSS 3.1 7.5 High
- Status
- Awaiting Analysis - psirt@cisco.com
- Published
- 2026-10-21
- Last modified
- 2026-10-26
- Weaknesses
- CWE-682
Affected products
- Cisco Cyber Vision (Cisco)
- Cisco Open Source Snort3 (Cisco)
- Cisco Secure Firewall Threat Defense Ftd Software (Cisco)
- Cisco Utd Snort Ips Engine Software (Cisco)
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe
