As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the Common Weakness Enumeration (CWE) Base CWE-269.
History

Thu, 22 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Cisco
Cisco cisco Open Source Snort3
Cisco cisco Secure Firewall Threat Defense (ftd) Software
Cisco cisco Utd Snort Ips Engine Software
Cisco cyber Vision
Cisco secure Firewall Threat Defense
Vendors & Products Cisco
Cisco cisco Open Source Snort3
Cisco cisco Secure Firewall Threat Defense (ftd) Software
Cisco cisco Utd Snort Ips Engine Software
Cisco cyber Vision
Cisco secure Firewall Threat Defense

Thu, 22 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Description As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the Common Weakness Enumeration (CWE) Base CWE-269.
Title Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
Weaknesses CWE-269
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2026-10-21T16:12:53.383Z

Updated: 2026-10-22T23:04:46.063Z

Reserved: 2025-10-08T11:59:15.405Z

Link: CVE-2026-20291

cve-icon Vulnrichment

Updated: 2026-10-22T13:36:59.445Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-21T17:18:28.473

Modified: 2026-10-22T23:18:31.427

Link: CVE-2026-20291

cve-icon Redhat

No data.