{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "cpe": "cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:*",
            "extracted_events": [
              {
                "introduced": "3.0.0-233"
              },
              {
                "fixed": "3.9.6.0"
              }
            ],
            "source": "CPE_RANGE"
          },
          "events": [
            {
              "introduced": "7ae50f4be245efd469dee2ce2855b6235b07aa42"
            },
            {
              "fixed": "4e69376284a392c7c5d34726f219409140a1e9f2"
            }
          ],
          "repo": "https://github.com/snort3/snort3",
          "type": "GIT"
        }
      ]
    }
  ],
  "database_specific": {
    "unresolved_ranges": [
      {
        "cpes": [
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10.2:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.10:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.2:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.6:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.7:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.8:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.9:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.2:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.2:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.3:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2.4:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.2:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.3:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.0:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.2:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.0:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10.1:*:*:*:*:*:*:*",
          "cpe:2.3:a:cisco:secure_firewall_threat_defense:7.7.10:*:*:*:*:*:*:*"
        ],
        "extracted_events": [
          {
            "introduced": "7.2.0"
          },
          {
            "last_affected": "7.2.0"
          },
          {
            "introduced": "7.2.0.1"
          },
          {
            "last_affected": "7.2.0.1"
          },
          {
            "introduced": "7.2.1"
          },
          {
            "last_affected": "7.2.1"
          },
          {
            "introduced": "7.2.2"
          },
          {
            "last_affected": "7.2.2"
          },
          {
            "introduced": "7.2.3"
          },
          {
            "last_affected": "7.2.3"
          },
          {
            "introduced": "7.2.4"
          },
          {
            "last_affected": "7.2.4"
          },
          {
            "introduced": "7.2.4.1"
          },
          {
            "last_affected": "7.2.4.1"
          },
          {
            "introduced": "7.2.5"
          },
          {
            "last_affected": "7.2.5"
          },
          {
            "introduced": "7.2.5.1"
          },
          {
            "last_affected": "7.2.5.1"
          },
          {
            "introduced": "7.2.5.2"
          },
          {
            "last_affected": "7.2.5.2"
          },
          {
            "introduced": "7.2.6"
          },
          {
            "last_affected": "7.2.6"
          },
          {
            "introduced": "7.2.7"
          },
          {
            "last_affected": "7.2.7"
          },
          {
            "introduced": "7.2.8"
          },
          {
            "last_affected": "7.2.8"
          },
          {
            "introduced": "7.2.8.1"
          },
          {
            "last_affected": "7.2.8.1"
          },
          {
            "introduced": "7.2.9"
          },
          {
            "last_affected": "7.2.9"
          },
          {
            "introduced": "7.2.10"
          },
          {
            "last_affected": "7.2.10"
          },
          {
            "introduced": "7.2.10.2"
          },
          {
            "last_affected": "7.2.10.2"
          },
          {
            "introduced": "7.3.0"
          },
          {
            "last_affected": "7.3.0"
          },
          {
            "introduced": "7.3.1"
          },
          {
            "last_affected": "7.3.1"
          },
          {
            "introduced": "7.3.1.1"
          },
          {
            "last_affected": "7.3.1.1"
          },
          {
            "introduced": "7.3.1.2"
          },
          {
            "last_affected": "7.3.1.2"
          },
          {
            "introduced": "7.4.0"
          },
          {
            "last_affected": "7.4.0"
          },
          {
            "introduced": "7.4.1"
          },
          {
            "last_affected": "7.4.1"
          },
          {
            "introduced": "7.4.1.1"
          },
          {
            "last_affected": "7.4.1.1"
          },
          {
            "introduced": "7.4.2"
          },
          {
            "last_affected": "7.4.2"
          },
          {
            "introduced": "7.4.2.1"
          },
          {
            "last_affected": "7.4.2.1"
          },
          {
            "introduced": "7.4.2.2"
          },
          {
            "last_affected": "7.4.2.2"
          },
          {
            "introduced": "7.4.2.3"
          },
          {
            "last_affected": "7.4.2.3"
          },
          {
            "introduced": "7.4.2.4"
          },
          {
            "last_affected": "7.4.2.4"
          },
          {
            "introduced": "7.4.3"
          },
          {
            "last_affected": "7.4.3"
          },
          {
            "introduced": "7.6.0"
          },
          {
            "last_affected": "7.6.0"
          },
          {
            "introduced": "7.6.1"
          },
          {
            "last_affected": "7.6.1"
          },
          {
            "introduced": "7.6.2"
          },
          {
            "last_affected": "7.6.2"
          },
          {
            "introduced": "7.6.2.1"
          },
          {
            "last_affected": "7.6.2.1"
          },
          {
            "introduced": "7.7.0"
          },
          {
            "last_affected": "7.7.0"
          },
          {
            "introduced": "7.7.10"
          },
          {
            "last_affected": "7.7.10"
          },
          {
            "introduced": "7.7.10.1"
          },
          {
            "last_affected": "7.7.10.1"
          }
        ],
        "source": "CPE_STRING",
        "vendor_product": "cisco:secure_firewall_threat_defense"
      },
      {
        "cpes": [
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4b:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5b:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5c:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5d:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.6:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.13.1a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.14.1a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.1a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2c:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4c:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.16.1a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.17.1:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.2:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.3a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5a:*:*:*:*:*:*:*",
          "cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.6:*:*:*:*:*:*:*"
        ],
        "extracted_events": [
          {
            "introduced": "17.9.3a"
          },
          {
            "last_affected": "17.9.3a"
          },
          {
            "introduced": "17.9.5a"
          },
          {
            "last_affected": "17.9.5a"
          },
          {
            "introduced": "17.9.6"
          },
          {
            "last_affected": "17.9.6"
          },
          {
            "introduced": "17.12.1a"
          },
          {
            "last_affected": "17.12.1a"
          },
          {
            "introduced": "17.12.2"
          },
          {
            "last_affected": "17.12.2"
          },
          {
            "introduced": "17.12.3"
          },
          {
            "last_affected": "17.12.3"
          },
          {
            "introduced": "17.12.3a"
          },
          {
            "last_affected": "17.12.3a"
          },
          {
            "introduced": "17.12.4"
          },
          {
            "last_affected": "17.12.4"
          },
          {
            "introduced": "17.12.4a"
          },
          {
            "last_affected": "17.12.4a"
          },
          {
            "introduced": "17.12.4b"
          },
          {
            "last_affected": "17.12.4b"
          },
          {
            "introduced": "17.12.5"
          },
          {
            "last_affected": "17.12.5"
          },
          {
            "introduced": "17.12.5a"
          },
          {
            "last_affected": "17.12.5a"
          },
          {
            "introduced": "17.12.5b"
          },
          {
            "last_affected": "17.12.5b"
          },
          {
            "introduced": "17.12.5c"
          },
          {
            "last_affected": "17.12.5c"
          },
          {
            "introduced": "17.12.5d"
          },
          {
            "last_affected": "17.12.5d"
          },
          {
            "introduced": "17.12.6"
          },
          {
            "last_affected": "17.12.6"
          },
          {
            "introduced": "17.13.1a"
          },
          {
            "last_affected": "17.13.1a"
          },
          {
            "introduced": "17.14.1a"
          },
          {
            "last_affected": "17.14.1a"
          },
          {
            "introduced": "17.15.1a"
          },
          {
            "last_affected": "17.15.1a"
          },
          {
            "introduced": "17.15.2a"
          },
          {
            "last_affected": "17.15.2a"
          },
          {
            "introduced": "17.15.2c"
          },
          {
            "last_affected": "17.15.2c"
          },
          {
            "introduced": "17.15.3"
          },
          {
            "last_affected": "17.15.3"
          },
          {
            "introduced": "17.15.3a"
          },
          {
            "last_affected": "17.15.3a"
          },
          {
            "introduced": "17.15.4"
          },
          {
            "last_affected": "17.15.4"
          },
          {
            "introduced": "17.15.4c"
          },
          {
            "last_affected": "17.15.4c"
          },
          {
            "introduced": "17.16.1a"
          },
          {
            "last_affected": "17.16.1a"
          },
          {
            "introduced": "17.17.1"
          },
          {
            "last_affected": "17.17.1"
          },
          {
            "introduced": "17.18.1"
          },
          {
            "last_affected": "17.18.1"
          },
          {
            "introduced": "17.18.1a"
          },
          {
            "last_affected": "17.18.1a"
          },
          {
            "introduced": "17.18.2"
          },
          {
            "last_affected": "17.18.2"
          }
        ],
        "source": "CPE_STRING",
        "vendor_product": "cisco:unified_threat_defense_snort_intrusion_prevention_system_engine"
      }
    ]
  },
  "details": "Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.\r\n\r\nThese vulnerabilities are due to improper error checking when decompressing VBA data. An attacker could exploit these vulnerabilities by sending crafted VBA data to the Snort 3 Detection Engine on the targeted device. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to unexpectedly restart, causing a DoS condition.",
  "id": "CVE-2026-20058",
  "modified": "2026-08-22T03:31:04.709528815Z",
  "published": "2026-03-04T18:16:20.643Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}