Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.
Published: 2026-10-21
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: Potential incorrect calculation affecting system stability
Action: Patch Now
AI Analysis

Impact

The CVE describes an issue involving improper calculation in Cisco’s Snort 3 software, classified under CWE‑682. This flaw could result in erroneous processing of inputs, which in turn may cause incorrect behavior or failure of the Snort engine. The impact is limited to the affected product’s operation and could manifest as malfunction, degraded performance, or unintended resource usage.

Affected Systems

Affected products are Cisco Cyber Vision, Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense (FTD) Software, and Cisco UTD SNORT IPS Engine Software. Version details have not been disclosed in the advisory.

Risk and Exploitability

The vulnerability carries a CVSS score of 7.5, indicating high severity. No EPSS data is provided, and the vulnerability is not listed in CISA KEV. The attack vector is not specified, but based on the description it is inferred that the flaw may be exploitable through malformed input to the Snort 3 engine. No public exploit has been reported, so the likelihood remains uncertain.

Generated by OpenCVE AI on October 21, 2026 at 20:34 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the hardening releases provided by Cisco to all affected Cisco Cyber Vision, Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense, and Cisco UTD SNORT IPS Engine Software instances.
  • If patches cannot be applied immediately, isolate the Snort 3 engine to trusted network segments and monitor for abnormal packet handling or failures that could indicate abuse of the calculation flaw.
  • Configure alerting for any parsing errors or unexpected resource consumption that may be caused by the incorrect calculation.

Generated by OpenCVE AI on October 21, 2026 at 20:34 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Description As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.
Title Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
Weaknesses CWE-682
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-10-21T16:12:58.186Z

Reserved: 2025-10-08T11:59:15.400Z

Link: CVE-2026-20236

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-21T17:18:28.247

Modified: 2026-10-21T18:54:37.403

Link: CVE-2026-20236

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T20:45:14Z

Weaknesses