12 casos · pág. 1/1
Cisco disclosed CVE-2026-76445, a medium-severity vulnerability in the Snort 3 Detection Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send a crafted, fragmented UDP datagram containing GPRS Tunneling Protocol (GTP) extension headers. This makes the detection engine enter an infinite loop and restart…
Cisco disclosed CVE-2026-20221, a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send a crafted GRE payload through an affected device to trigger an unexpected restart of the engine. Dependin…
Cisco disclosed CVE-2026-20218, a stack buffer overflow in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send crafted VBA data to a targeted device, causing the Snort 3 Detection Engine to restart unexpectedly and producing a denial of ser…
Cisco published an advisory covering multiple vulnerabilities in the Snort 3 Detection Engine that affect several Cisco products. An unauthenticated, remote attacker could force the engine to restart unexpectedly, causing a denial of service (DoS). Cisco rates the Security Impact Rating as Medium and has released software updates. No work…
Cisco disclosed CVE-2026-20011, a medium-severity vulnerability in the Snort 3 SMTP MIME Decoder affecting multiple Cisco products. An unauthenticated, remote attacker can cause the Snort 3 Detection Engine to restart, producing a denial-of-service condition. Cisco has released software updates, and no workarounds exist. The advisory is p…
Cisco disclosed CVE-2026-76505, a High-rated vulnerability in the IPv4 packet processing of Cisco IOS XR Software on Cisco ASR 9000 and 9900 Series routers and ASR 9902/9903 Compact High-Performance Routers. An unauthenticated, remote attacker can send crafted IPv4 packets that trigger network processor (NP) errors, resetting or shutting …
Cisco disclosed CVE-2026-20154, a high-severity vulnerability in the system rate-limiting process for syslog message 419002 in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. An unauthenticated, remote attacker can cause high CPU utilization on an affected device, r…
Cisco updated its advisory for CVE-2024-20260, a denial-of-service vulnerability in the VPN and management web servers of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. The original version covered only the ASAv and FTDv virtual models, but Cisco later found that a…
Cisco disclosed CVE-2026-20173, a medium-severity vulnerability in Cisco NX-OS Software that lets an unauthenticated, remote attacker exhaust system resources and cause a denial of service (DoS). The flaw exists because rate limiting is improperly applied to some protocols. The DoS condition clears without manual intervention soon after t…
Cisco disclosed multiple critical vulnerabilities in the Next Generation OAM (NGOAM) feature of Cisco NX-OS Software, affecting Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. The flaws ar…
Cisco disclosed a critical vulnerability, CVE-2026-76465, in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an af…
Cisco disclosed a critical vulnerability, CVE-2026-76471, in the NX-API feature of Cisco NX-OS Software. An unauthenticated, remote attacker could use it to execute arbitrary code with root privileges or to cause a denial of service on an affected device. Cisco rates the Security Impact as Critical. Software updates are available and no w…
