SB2026030449 - Multiple vulnerabilities in Cisco Firewall Threat Defense (FTD)

Security Bulletin ID SB2026030449

Severity

Medium

Patch available

YES

Number of vulnerabilities 4

Exploitation vector Remote access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Heap-based buffer overflow (CVE-ID: CVE-2026-20053)

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error in the Snort 3 VBA feature. A remote attacker can send specially crafted VBA data to the Snort 3 Detection Engine, trigger a heap-based buffer overflow and perform a denial of service attack.

2) Infinite loop (CVE-ID: CVE-2026-20054)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop in the Snort 3 VBA feature. A remote attacker can send specially crafted VBA data to the Snort 3 Detection Engine and perform a denial of service attack.

3) Improper error handling (CVE-ID: CVE-2026-20057)

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to improper error handling in the Snort 3 VBA feature. A remote attacker can send specially crafted VBA data to the Snort 3 Detection Engine and perform a denial of service attack.

4) Improper error handling (CVE-ID: CVE-2026-20058)

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to improper error handling in the Snort 3 VBA feature. A remote attacker can send specially crafted VBA data to the Snort 3 Detection Engine and perform a denial of service attack.

Remediation

Install update from vendor's website.

SB2026030449 - Multiple vulnerabilities in Cisco Firewall Threat Defense (FTD)

Breakdown by Severity

Description

Remediation

References

Please verify you're human