U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2026-20058

Change History

Initial Analysis by NIST 8/19/2026 4:49:49 PM

Action Type Old Value New Value
Added CPE Configuration

                  
                
              
OR
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.3:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.6.0:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.6.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.6.2:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.6.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.7.0:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.0:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.0.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.10:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.10.2:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.2:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.3:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.4:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.4.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.5:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.5.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.5.2:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.6:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.7:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.8:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.8.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.2.9:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.3.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.3.1.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.3.1.2:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.1.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.2:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.2.2:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.2.3:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.4.2.4:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.7.10:*:*:*:*:*:*:*
          *cpe:2.3:a:cisco:secure_firewall_threat_defennse:7.7.10.1:*:*:*:*:*:*:*
Added CPE Configuration

                  
                
              
OR
          *cpe:2.3:a:cisco:snort:*:*:*:*:*:*:*:* versions from (including) 3.0.0-233 up to (excluding) 3.9.6.0
Added CPE Configuration

                  
                
              
OR
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.5a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.1a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.2:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.3a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.13.1a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.14.1a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.1a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.4b:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5b:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5c:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.5d:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.12.6:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.2c:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.3a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.15.4c:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.16.1a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.17.1:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.1a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.18.2:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.3a:*:*:*:*:*:*:*
          *cpe:2.3:o:cisco:unified_threat_defense_snort_intrusion_prevention_system_engine:17.9.6:*:*:*:*:*:*:*
Added Reference Type

                  
                
              
Cisco Systems, Inc.: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-vbavuls-96UcVVed Types: Mitigation, Vendor Advisory