CVE-2026-20236highCWE-682

CVE-2026-20236: falha de alta gravidade em Cisco Cyber Vision

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Secure Firewall Threat Defense+ Monitorar Cisco UTD SNORT IPS Engine

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.

ssvc Trackcvss 7.5epss 0.4%
Alerta oficial no Brasil

O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.

Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Cisco · Cisco Cyber VisionCisco · Cisco Open Source Snort3Cisco · Cisco Secure Firewall Threat Defense (FTD) SoftwareCisco · Cisco UTD SNORT IPS Engine Software
CVEs relacionadas — Cisco Cyber Vision

No mesmo produto, das mais perigosas para as menos.

CVE-2025-20362MEDIUMCVE-2025-20362EPSS 86.7%KEVCVE-2025-20333CRITICALCVE-2025-20333EPSS 72.0%KEVCVE-2026-20349HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityEPSS 1.0%KEVCVE-2026-76418HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityEPSS 0.8%KEVCVE-2022-20685HIGHMultiple Cisco Products Snort Modbus Denial of Service VulnerabilityEPSS 1.5%CVE-2020-3448MEDIUMCisco Cyber Vision Center Software Access Control Bypass VulnerabilityEPSS 1.1%