PT-2026-23010 · Snort+1 · Snort+1

Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-20007

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Threat Defense (FTD) Software versions (affected versions not specified) Snort versions 2 and 3 (affected versions not specified)

Description A flaw exists in the deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software using Snort 2 and Snort 3. This issue could allow a remote, unauthenticated attacker to circumvent established Snort rules, potentially permitting unauthorized traffic onto the network. The root cause is a logic error in how Snort Engine rules interact with Cisco Secure FTD Software during deep packet inspection, where different rules may be triggered for inner and outer connections. An attacker could exploit this by sending specifically crafted traffic, potentially bypassing network security measures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-20007

Affected Products

Cisco Secure Firewall Threat Defense (Ftd)

Snort

References · 4

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20007 · Security Note
• https://twitter.com/CVEnew/status/2029272796811936114 · Twitter Post
• https://t.me/CVEtracker/46346 · Telegram Post