CVE Listesine Dön
CVE-2026-20067

Out-of-bounds write in Cisco Snort

CVSS Skor

5.8

EPSS İhtimal

%0.5

Risk Skoru

0.0

Yayın

7 ay önce

Overview (Genel Bakış)Public Exploits (0)Newsroom (Haberler)Vulnerability Timeline
Yama durumu henüz doğrulanamadı

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2026-20067 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.  This vulnerability is due to incomplete error checking when parsing the Multicast DNS fields of the HTTP header. An attacker could exploit this vulnerability by sending crafted HTTP packets through an established connection to be parsed by Snort 3. A successful exploit could allow the attacker to cause a DoS condition when the Snort 3 Detection Engine unexpectedly restarts.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2026-20067 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1ciscosnort İncele
2ciscocyber vision İncele
3ciscocyber vision İncele
4ciscocyber vision İncele
5ciscocyber vision İncele
6ciscocyber vision İncele
7ciscocyber vision İncele
8ciscocyber vision İncele
9ciscocyber vision İncele
10ciscocyber vision İncele
11ciscocyber vision İncele
12ciscocyber vision İncele
13ciscocyber vision İncele
14ciscocyber vision İncele
15ciscocyber vision İncele
16ciscocyber vision İncele
17ciscocyber vision İncele
18ciscocyber vision İncele
19ciscocyber vision İncele
20ciscocyber vision İncele
21ciscocyber vision İncele
22ciscocyber vision İncele
23ciscocyber vision İncele
24ciscocyber vision İncele
25ciscocyber vision İncele
26ciscocyber vision İncele
27ciscocyber vision İncele
28ciscocyber vision İncele
29ciscocyber vision İncele
30ciscocyber vision İncele
31ciscocyber vision İncele
32ciscocyber vision İncele
33ciscocyber vision İncele
34ciscocyber vision İncele
35ciscocyber vision İncele
36ciscocyber vision İncele
37ciscocyber vision İncele
38ciscocyber vision İncele
39ciscocyber vision İncele
40ciscocyber vision İncele
41ciscocyber vision İncele
42ciscocyber vision İncele
43ciscocyber vision İncele
44ciscocyber vision İncele
45ciscocyber vision İncele
46ciscocyber vision İncele
47ciscocyber vision İncele
48ciscocyber vision İncele
49ciscocyber vision İncele
50ciscocyber vision İncele
51ciscocyber vision İncele
52ciscocyber vision İncele
53ciscocyber vision İncele
54ciscocyber vision İncele
55ciscosecure firewall threat defense İncele
56ciscosecure firewall threat defense İncele
57ciscosecure firewall threat defense İncele
58ciscosecure firewall threat defense İncele
59ciscosecure firewall threat defense İncele
60ciscosecure firewall threat defense İncele
61ciscosecure firewall threat defense İncele
62ciscosecure firewall threat defense İncele
63ciscosecure firewall threat defense İncele
64ciscosecure firewall threat defense İncele
65ciscosecure firewall threat defense İncele
66ciscosecure firewall threat defense İncele
67ciscosecure firewall threat defense İncele
68ciscosecure firewall threat defense İncele
69ciscosecure firewall threat defense İncele
70ciscosecure firewall threat defense İncele
71ciscosecure firewall threat defense İncele
72ciscosecure firewall threat defense İncele
73ciscosecure firewall threat defense İncele
74ciscosecure firewall threat defense İncele
75ciscosecure firewall threat defense İncele
76ciscosecure firewall threat defense İncele
77ciscosecure firewall threat defense İncele
78ciscosecure firewall threat defense İncele
79ciscosecure firewall threat defense İncele
80ciscosecure firewall threat defense İncele
81ciscosecure firewall threat defense İncele
82ciscosecure firewall threat defense İncele
83ciscosecure firewall threat defense İncele
84ciscosecure firewall threat defense İncele
85ciscosecure firewall threat defense İncele
86ciscosecure firewall threat defense İncele
87ciscosecure firewall threat defense İncele
88ciscosecure firewall threat defense İncele
89ciscosecure firewall threat defense İncele
90ciscosecure firewall threat defense İncele
91ciscosecure firewall threat defense İncele
92ciscosecure firewall threat defense İncele
93ciscosecure firewall threat defense İncele
94ciscosecure firewall threat defense İncele
95ciscosecure firewall threat defense İncele
96ciscosecure firewall threat defense İncele
97ciscosecure firewall threat defense İncele
98ciscosecure firewall threat defense İncele
99ciscosecure firewall threat defense İncele
100ciscosecure firewall threat defense İncele
101ciscosecure firewall threat defense İncele
102ciscosecure firewall threat defense İncele
103ciscosecure firewall threat defense İncele
104ciscosecure firewall threat defense İncele
105ciscosecure firewall threat defense İncele
106ciscosecure firewall threat defense İncele
107ciscosecure firewall threat defense İncele
108ciscosecure firewall threat defense İncele
109ciscosecure firewall threat defense İncele
110ciscosecure firewall threat defense İncele
111ciscosecure firewall threat defense İncele
112ciscounified threat defense snort intrusion prevention system engine İncele
113ciscounified threat defense snort intrusion prevention system engine İncele
114ciscounified threat defense snort intrusion prevention system engine İncele
115ciscounified threat defense snort intrusion prevention system engine İncele
116ciscounified threat defense snort intrusion prevention system engine İncele
117ciscounified threat defense snort intrusion prevention system engine İncele
118ciscounified threat defense snort intrusion prevention system engine İncele
119ciscounified threat defense snort intrusion prevention system engine İncele
120ciscounified threat defense snort intrusion prevention system engine İncele
121ciscounified threat defense snort intrusion prevention system engine İncele
122ciscounified threat defense snort intrusion prevention system engine İncele
123ciscounified threat defense snort intrusion prevention system engine İncele
124ciscounified threat defense snort intrusion prevention system engine İncele
125ciscounified threat defense snort intrusion prevention system engine İncele
126ciscounified threat defense snort intrusion prevention system engine İncele
127ciscounified threat defense snort intrusion prevention system engine İncele
128ciscounified threat defense snort intrusion prevention system engine İncele
129ciscounified threat defense snort intrusion prevention system engine İncele
130ciscounified threat defense snort intrusion prevention system engine İncele
131ciscounified threat defense snort intrusion prevention system engine İncele
132ciscounified threat defense snort intrusion prevention system engine İncele
133ciscounified threat defense snort intrusion prevention system engine İncele
134ciscounified threat defense snort intrusion prevention system engine İncele
135ciscounified threat defense snort intrusion prevention system engine İncele
136ciscounified threat defense snort intrusion prevention system engine İncele
137ciscounified threat defense snort intrusion prevention system engine İncele
138ciscounified threat defense snort intrusion prevention system engine İncele
139ciscounified threat defense snort intrusion prevention system engine İncele
140ciscounified threat defense snort intrusion prevention system engine İncele
141ciscounified threat defense snort intrusion prevention system engine İncele
142ciscounified threat defense snort intrusion prevention system engine İncele
143ciscounified threat defense snort intrusion prevention system engine İncele
144ciscounified threat defense snort intrusion prevention system engine İncele
145ciscounified threat defense snort intrusion prevention system engine İncele
146ciscounified threat defense snort intrusion prevention system engine İncele
147ciscounified threat defense snort intrusion prevention system engine İncele
148ciscounified threat defense snort intrusion prevention system engine İncele
149ciscounified threat defense snort intrusion prevention system engine İncele
150ciscounified threat defense snort intrusion prevention system engine İncele
151ciscounified threat defense snort intrusion prevention system engine İncele
152ciscounified threat defense snort intrusion prevention system engine İncele
153ciscounified threat defense snort intrusion prevention system engine İncele
154ciscounified threat defense snort intrusion prevention system engine İncele
155ciscounified threat defense snort intrusion prevention system engine İncele
156ciscounified threat defense snort intrusion prevention system engine İncele
157ciscounified threat defense snort intrusion prevention system engine İncele
158ciscounified threat defense snort intrusion prevention system engine İncele
159ciscounified threat defense snort intrusion prevention system engine İncele
160ciscounified threat defense snort intrusion prevention system engine İncele
161ciscounified threat defense snort intrusion prevention system engine İncele
162ciscounified threat defense snort intrusion prevention system engine İncele
163ciscounified threat defense snort intrusion prevention system engine İncele
164ciscounified threat defense snort intrusion prevention system engine İncele
165ciscounified threat defense snort intrusion prevention system engine İncele
166ciscounified threat defense snort intrusion prevention system engine İncele
167ciscounified threat defense snort intrusion prevention system engine İncele
168ciscounified threat defense snort intrusion prevention system engine İncele
169ciscounified threat defense snort intrusion prevention system engine İncele
170ciscounified threat defense snort intrusion prevention system engine İncele
171ciscounified threat defense snort intrusion prevention system engine İncele
172ciscounified threat defense snort intrusion prevention system engine İncele
173ciscounified threat defense snort intrusion prevention system engine İncele
174ciscounified threat defense snort intrusion prevention system engine İncele
175ciscounified threat defense snort intrusion prevention system engine İncele
176ciscounified threat defense snort intrusion prevention system engine İncele
177ciscounified threat defense snort intrusion prevention system engine İncele
178ciscounified threat defense snort intrusion prevention system engine İncele
179ciscounified threat defense snort intrusion prevention system engine İncele
180ciscounified threat defense snort intrusion prevention system engine İncele
181ciscounified threat defense snort intrusion prevention system engine İncele
182ciscounified threat defense snort intrusion prevention system engine İncele
Total Affected Vendor: 1|Products: 182

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Red Hat bu CVE için henüz bir CSAF/VEX etki kaydı yayımlamamış. Bu durum “etkilenmiyor” anlamına gelmez.

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
5.8CVSS V31MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:LNVD

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Yama doğrulanana kadar üretici bültenini izleyin; bilinmeyen durumu “yama yok” olarak yorumlamayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Bu CVE için henüz doğrulanmış public PoC, exploit repository’si veya Metasploit modülü bulunamadı.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-20067 is associated with the following CWEs:

CWE-787: Out-of-bounds Write

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-20067 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwzvendor-advisory

CVSS Vektör Radar Grafiği

5.8 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityLow

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges RequiredNone (Gerekmiyor)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)Low (Düşük)

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Üreticiyi takip et

C
cisco logo
cisco

Zafiyet Türü (CWE & CAPEC)

CWE-787

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-20067"