{"api_version":"1","generated_at":"2026-09-07T13:31:19+00:00","cve":"CVE-2026-20058","urls":{"html":"https://cve.report/CVE-2026-20058","api":"https://cve.report/api/cve/CVE-2026-20058.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-20058","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-20058"},"summary":{"title":"Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability","description":"Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.\r\n\r\nThese vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.","state":"PUBLISHED","assigner":"cisco","published_at":"2026-03-04 18:16:20","updated_at":"2026-08-20 10:37:34"},"problem_types":["CWE-786","CWE-786 Access of Memory Location Before Start of Buffer"],"metrics":[{"version":"3.1","source":"psirt@cisco.com","type":"Secondary","score":"5.8","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"}},{"version":"3.1","source":"CNA","type":"CVSSV3_1","score":"5.8","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.8,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","version":"3.1"}}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed","name":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed","refsource":"psirt@cisco.com","tags":["Mitigation","Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-20058","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20058","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.0.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.3.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.3.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.4.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.3.1.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.5.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.1.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.7","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.5.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.3.1.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.8","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.6.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.8.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.2.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.9","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.7.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.2.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.10","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.6.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.2.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.6.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.7.10","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.6.2.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.7.10.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.2.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.2.10.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Secure Firewall Threat Defense (FTD) Software","version":"affected 7.4.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.9.3a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.1a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.13.1a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.9.5a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.14.1a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.3a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.15.1a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.9.6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.16.1a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.4a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.15.2c","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.4b","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.15.2a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.17.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.5a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.15.3a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.15.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.5b","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.5c","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.15.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.18.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.18.1a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.15.4c","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.12.5d","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco UTD SNORT IPS Engine Software","version":"affected 17.18.2","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[{"source":"CNA","title":"","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.","time":"","lang":"en"}],"credits":[],"nvd_cpes":[{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.10.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.2.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.6.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.7.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"secure_firewall_threat_defense","cpe6":"7.7.10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"snort","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.1a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.3a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.4a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.4b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.5a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.5b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.5c","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.5d","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.12.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.13.1a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.14.1a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.15.1a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.15.2a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.15.2c","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.15.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.15.3a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.15.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.15.4c","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.16.1a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.17.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.18.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.18.1a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.18.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.9.3a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.9.5a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"20058","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"unified_threat_defense_snort_intrusion_prevention_system_engine","cpe6":"17.9.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"20058","cve":"CVE-2026-20058","epss":"0.003900000","percentile":"0.323610000","score_date":"2026-08-20","updated_at":"2026-08-21 00:13:52"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-20058","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-03-04T21:01:22.100265Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-03-04T21:01:36.320Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unknown","product":"Cisco Secure Firewall Threat Defense (FTD) Software","vendor":"Cisco","versions":[{"status":"affected","version":"7.2.0"},{"status":"affected","version":"7.2.0.1"},{"status":"affected","version":"7.2.1"},{"status":"affected","version":"7.3.0"},{"status":"affected","version":"7.2.2"},{"status":"affected","version":"7.2.3"},{"status":"affected","version":"7.3.1"},{"status":"affected","version":"7.2.4"},{"status":"affected","version":"7.2.5"},{"status":"affected","version":"7.2.4.1"},{"status":"affected","version":"7.3.1.1"},{"status":"affected","version":"7.4.0"},{"status":"affected","version":"7.2.5.1"},{"status":"affected","version":"7.4.1"},{"status":"affected","version":"7.2.6"},{"status":"affected","version":"7.4.1.1"},{"status":"affected","version":"7.2.7"},{"status":"affected","version":"7.2.5.2"},{"status":"affected","version":"7.3.1.2"},{"status":"affected","version":"7.2.8"},{"status":"affected","version":"7.6.0"},{"status":"affected","version":"7.4.2"},{"status":"affected","version":"7.2.8.1"},{"status":"affected","version":"7.4.2.1"},{"status":"affected","version":"7.2.9"},{"status":"affected","version":"7.7.0"},{"status":"affected","version":"7.4.2.2"},{"status":"affected","version":"7.2.10"},{"status":"affected","version":"7.6.1"},{"status":"affected","version":"7.4.2.3"},{"status":"affected","version":"7.6.2"},{"status":"affected","version":"7.7.10"},{"status":"affected","version":"7.6.2.1"},{"status":"affected","version":"7.7.10.1"},{"status":"affected","version":"7.4.2.4"},{"status":"affected","version":"7.2.10.2"},{"status":"affected","version":"7.4.3"}]},{"defaultStatus":"unknown","product":"Cisco UTD SNORT IPS Engine Software","vendor":"Cisco","versions":[{"status":"affected","version":"17.9.3a"},{"status":"affected","version":"17.12.1a"},{"status":"affected","version":"17.12.2"},{"status":"affected","version":"17.13.1a"},{"status":"affected","version":"17.9.5a"},{"status":"affected","version":"17.12.3"},{"status":"affected","version":"17.14.1a"},{"status":"affected","version":"17.12.4"},{"status":"affected","version":"17.12.3a"},{"status":"affected","version":"17.15.1a"},{"status":"affected","version":"17.9.6"},{"status":"affected","version":"17.16.1a"},{"status":"affected","version":"17.12.4a"},{"status":"affected","version":"17.15.2c"},{"status":"affected","version":"17.12.4b"},{"status":"affected","version":"17.15.2a"},{"status":"affected","version":"17.12.5"},{"status":"affected","version":"17.17.1"},{"status":"affected","version":"17.12.5a"},{"status":"affected","version":"17.15.3a"},{"status":"affected","version":"17.15.3"},{"status":"affected","version":"17.12.5b"},{"status":"affected","version":"17.12.5c"},{"status":"affected","version":"17.15.4"},{"status":"affected","version":"17.18.1"},{"status":"affected","version":"17.18.1a"},{"status":"affected","version":"17.12.6"},{"status":"affected","version":"17.15.4c"},{"status":"affected","version":"17.12.5d"},{"status":"affected","version":"17.18.2"}]}],"descriptions":[{"lang":"en","value":"Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.\r\n\r\nThese vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition."}],"exploits":[{"lang":"en","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.8,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","version":"3.1"},"format":"cvssV3_1"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-786","description":"Access of Memory Location Before Start of Buffer","lang":"en","type":"cwe"}]}],"providerMetadata":{"dateUpdated":"2026-03-04T17:47:14.841Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"cisco-sa-ftd-snort3-vbavuls-96UcVVed","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed"}],"source":{"advisory":"cisco-sa-ftd-snort3-vbavuls-96UcVVed","defects":["CSCwq23369"],"discovery":"INTERNAL"},"title":"Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability"}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2026-20058","datePublished":"2026-03-04T17:47:14.841Z","dateReserved":"2025-10-08T11:59:15.356Z","dateUpdated":"2026-03-04T21:01:36.320Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-03-04 18:16:20","lastModifiedDate":"2026-08-20 10:37:34","problem_types":["CWE-786","CWE-786 Access of Memory Location Before Start of Buffer"],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-04T21:01:22.100265Z","id":"CVE-2026-20058","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0-233","versionEndExcluding":"3.9.6.0","matchCriteriaId":"ED74FA2A-59F1-47F1-B4DF-260E01AD4661"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"237462A2-E0CF-4201-9115-D94910F9745B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CA2F5B0-0106-4FF2-91BD-AEF3F064F69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FFE56-9A00-456E-B097-114F714133BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0E253A08-B4D4-4E81-9D5A-C15D198C43AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"59C7F868-1571-44CC-90E1-7A5EA01E63FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7432B6F9-03CD-4373-B281-2A09864E7828"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3D42B7E6-71ED-48BA-B11F-6791FE96C1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"39CC3AC6-6F75-43BF-BBC9-F74AADB74716"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"FFBAC033-FF89-4581-92F6-EA4FFEE40F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5AF3CB27-8315-452F-80E1-5DAF883319B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7A910367-E5D5-4817-9DAA-3225D4FA8055"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.7:*:*:*:*:*:*:*","matchCriteriaId":"38EC17C6-2DA5-4E26-987A-FD14F539F55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8:*:*:*:*:*:*:*","matchCriteriaId":"25E3D7DE-90EB-4531-BD7D-738637A83CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"4E7FE2B9-65C0-4F7F-8810-72BFE861C521"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.9:*:*:*:*:*:*:*","matchCriteriaId":"839E56CB-B466-4A38-A6E0-EBF27AA46315"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10:*:*:*:*:*:*:*","matchCriteriaId":"A90CFCD8-F873-4BEB-8193-97B62DB7FDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"677E2330-7FB5-4D91-9543-4941A8BE6A38"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD33999C-8DE7-4C0C-A8E5-1BA7127E36FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A977F379-2F93-4A56-B0A6-C45AEF274123"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DA7FA3B6-D630-42E3-B69F-B20D38B33531"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9B125CC4-0DAE-4C26-9A27-2532BB09EA8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"5BC88149-095A-41DE-AA27-1CFD21125EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BA983223-35AE-4D2F-B2F5-BA0614908C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"17A31A33-2E84-4C79-86BD-1E9FF4C1DD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B58DC884-9430-49D4-AA8B-7FEB7505B7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5EC075D4-0033-46ED-9E55-576997424382"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EA94FBB2-E095-48A3-BA39-5C2EC01D0ACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D61D406F-6796-4E90-A954-285F6A3785AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"24DA7AE5-6288-4901-B9C9-36DF3788AA9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.3:*:*:*:*:*:*:*","matchCriteriaId":"55A60A76-D206-43B2-B6B1-94757FB3E258"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E91D9CAD-174A-4AAE-AB14-BD3110F9CFA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8EC515FD-4D9A-428D-9E72-9014C613A0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5B53EBBB-8E55-4D94-ADD3-C93630E09241"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D9033AA9-2481-406A-8FBD-C671D3888D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"2F843EFD-0130-45F0-A212-9921879F3CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10:*:*:*:*:*:*:*","matchCriteriaId":"47EFC734-E450-4606-939A-86BE0F7FC5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10.1:*:*:*:*:*:*:*","matchCriteriaId":"814577AF-98E9-49A8-8F1C-BF938D4F1F29"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"5B248BC8-83EE-4D84-82CE-5E0E9A857246"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"D247882B-DDA4-47A6-A2B0-2AFFCB94F133"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.6:*:*:*:*:*:*:*","matchCriteriaId":"19F3B076-F66D-4E18-8A0A-1293C985B4A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*","matchCriteriaId":"8FC4D3D8-4391-4ED6-B27B-EF47C96904CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*","matchCriteriaId":"60AE1B18-3CEB-45B3-A43D-3C6DCC1F20F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3:*:*:*:*:*:*:*","matchCriteriaId":"9F4AA555-A8AD-4EF1-BDED-CCB550AA7560"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3a:*:*:*:*:*:*:*","matchCriteriaId":"158ADFDB-D308-40AA-A445-BB9AF2F2414B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4:*:*:*:*:*:*:*","matchCriteriaId":"5F44916C-A0B3-40B1-B9E5-ACED3A0ECC80"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4a:*:*:*:*:*:*:*","matchCriteriaId":"A685AE11-0D19-4F98-B1A1-F40C66407A20"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4b:*:*:*:*:*:*:*","matchCriteriaId":"8E0C23C5-4248-485F-8132-8459933EBDE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5:*:*:*:*:*:*:*","matchCriteriaId":"410D8A3B-CCD3-4BBC-BF03-63717B397E33"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5a:*:*:*:*:*:*:*","matchCriteriaId":"57D161E1-A275-44B1-AAC5-7A5207243A8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5b:*:*:*:*:*:*:*","matchCriteriaId":"AB1C329A-CFA4-432C-926C-AD4EE14D30BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5c:*:*:*:*:*:*:*","matchCriteriaId":"BAA951FD-37B6-4D5B-BC88-5FD6E1A670EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5d:*:*:*:*:*:*:*","matchCriteriaId":"CD3F8898-782F-49DA-8FB4-625BCB08C267"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.6:*:*:*:*:*:*:*","matchCriteriaId":"3D17AF21-1F77-425F-9DC0-42E4F82309C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.13.1a:*:*:*:*:*:*:*","matchCriteriaId":"AA3E7D96-E406-4CB5-91FC-A0FD5D94A876"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.14.1a:*:*:*:*:*:*:*","matchCriteriaId":"07AAFFE0-B85D-4A62-894B-20A05973CC5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.1a:*:*:*:*:*:*:*","matchCriteriaId":"7842C05A-F9DE-49A7-8478-A1EF324C593D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2a:*:*:*:*:*:*:*","matchCriteriaId":"9A6C2814-0DAC-40AF-9494-3EEA9429F603"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2c:*:*:*:*:*:*:*","matchCriteriaId":"25A353E7-5F9E-4A94-BDA9-598C54572FEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3:*:*:*:*:*:*:*","matchCriteriaId":"70B8BACE-F390-402E-B80B-F57F473B1415"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3a:*:*:*:*:*:*:*","matchCriteriaId":"7E984118-99E5-45BC-B238-E950E62E1A77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4:*:*:*:*:*:*:*","matchCriteriaId":"3825888B-D34F-466F-9E91-CBDE7A07B43C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4c:*:*:*:*:*:*:*","matchCriteriaId":"2E88110E-78DE-4799-8F22-37E8B010DF81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.16.1a:*:*:*:*:*:*:*","matchCriteriaId":"D1D5E95D-1CE2-472B-A4C6-E098B01BA3FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.17.1:*:*:*:*:*:*:*","matchCriteriaId":"6D8E05E5-1957-44D0-BD34-45A9AB4782B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB3A273-B0E6-4659-91C4-77F0192EE1DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1a:*:*:*:*:*:*:*","matchCriteriaId":"2FFB4BE9-4CC8-49F2-851C-F4EA098BA3AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.2:*:*:*:*:*:*:*","matchCriteriaId":"E8759E40-63D2-4FA4-9A40-CB330413798E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"20058","Ordinal":"1","Title":"Cisco Secure Firewall Threat Defense Software Snort 3 Visual Bas","CVE":"CVE-2026-20058","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"20058","Ordinal":"1","NoteData":"Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.\r\n\r\nThese vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.","Type":"Description","Title":"Cisco Secure Firewall Threat Defense Software Snort 3 Visual Bas"}]}}}