Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-20007

Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a logic error in the integration of the Snort Engine rules with Cisco Secure FTD Software that could allow different Snort rules to be hit when deep inspection of the packet is performed for the inner and outer connections. An attacker could exploit this vulnerability by sending crafted traffic to a targeted device that would hit configured Snort rules. A successful exploit could allow the attacker to send traffic to a network where it should have been denied.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Secure Firewall Threat Defense (FTD) Software

Default version status: unknown

  • 6.4.0.1affected
  • 6.4.0.2affected
  • 6.4.0.5affected
  • 6.4.0affected
  • 6.4.0.3affected
  • 6.4.0.4affected
  • 6.4.0.6affected
  • 6.4.0.7affected
  • 6.4.0.8affected
  • 6.4.0.9affected
  • 6.4.0.10affected
  • 6.4.0.11affected
  • 6.4.0.12affected
  • 7.0.0affected
  • 7.0.0.1affected
  • 7.0.1affected
  • 7.1.0affected
  • 6.4.0.13affected
  • 7.0.1.1affected
  • 6.4.0.14affected
  • 7.1.0.1affected
  • 7.0.2affected
  • 6.4.0.15affected
  • 7.2.0affected
  • 7.0.2.1affected
  • 7.0.3affected
  • 7.1.0.2affected
  • 7.2.0.1affected
  • 7.0.4affected
  • 7.2.1affected
  • 7.0.5affected
  • 6.4.0.16affected
  • 7.3.0affected
  • 7.2.2affected
  • 7.2.3affected
  • 7.3.1affected
  • 7.1.0.3affected
  • 7.2.4affected
  • 7.0.6affected
  • 7.2.5affected
  • 7.2.4.1affected
  • 7.3.1.1affected
  • 7.4.0affected
  • 6.4.0.17affected
  • 7.0.6.1affected
  • 7.2.5.1affected
  • 7.4.1affected
  • 7.2.6affected
  • 7.0.6.2affected
  • 7.4.1.1affected
  • 6.4.0.18affected
  • 7.2.7affected
  • 7.2.5.2affected
  • 7.3.1.2affected
  • 7.2.8affected
  • 7.6.0affected
  • 7.4.2affected
  • 7.2.8.1affected
  • 7.0.6.3affected
  • 7.4.2.1affected
  • 7.2.9affected
  • 7.0.7affected
  • 7.7.0affected
  • 7.4.2.2affected
  • 7.2.10affected
  • 7.6.1affected
  • 7.4.2.3affected
  • 7.0.8affected
  • 7.6.2affected
  • 7.0.8.1affected
  • 7.6.2.1affected
  • 7.4.2.4affected
  • 7.2.10.2affected

References