CVE-2026-20291

HighCVSS 7.8/10Last modified Nov 7, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the Common Weakness Enumeration (CWE) Base CWE-269.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
CiscoCisco Cyber Vision3.0.0; 3.0.2; 3.0.3; 3.0.1; 3.1.0; 3.0.4; 3.1.1; 3.1.2; 3.2.0; 3.0.5; 3.2.1; 3.0.6; 3.2.2; 3.2.3; 3.2.4; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.1.0
CiscoCisco Open Source Snort33.12.2.0; 3.1.2.0; 3.1.3.0; 3.1.4.0; 3.1.5.0; 3.1.6.0; 3.1.7.0; 3.1.8.0; 3.1.9.0; 3.1.10.0; 3.1.12.0; 3.1.13.0; 3.1.14.0; 3.1.15.0; 3.1.16.0; 3.1.17.0; 3.1.18.0; 3.1.19.0; 3.1.20.0; 3.1.21.0
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; 7.0.2.1; 7.0.3; 7.2.0.1; 7.0.4; 7.2.1; 7.0.5; 7.3.0; 7.2.2; 7.2.3; 7.3.1; 7.2.4; 7.0.6; 7.2.5; 7.2.4.1
CiscoCisco UTD SNORT IPS Engine Software17.12.1a; 17.12.2; 17.13.1a; 17.12.3; 17.14.1a; 17.12.4; 17.12.3a; 17.15.1a; 17.16.1a; 17.12.4a; 17.15.2c; 17.12.4b; 17.15.2a; 17.12.5; 17.17.1; 17.12.5a; 17.15.3a; 17.15.3; 17.12.5b; 17.12.5c

References

Timeline

Published
Oct 21, 2026
Last modified
Nov 7, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-202937.1A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances couldCVE-2026-202946.5A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to viewCVE-2026-202958.6A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow aCVE-2026-202968.3In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 1CVE-2026-202977.2In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2CVE-2026-202986.5In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 1CVE-2026-20306.4The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[lvca_carousel]` andCVE-2026-203007.1A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploiCVE-2026-203018.6A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software CVE-2026-203026.1A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an CVE-2026-203039.9As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a CVE-2026-203049.9As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a