Cisco Snort 3 に権限管理の不備、複数製品に影響
Summary
Cisco Snort 3 の内部レビューで見つかった脆弱性により、権限が適切に管理されない問題（CWE-269）が起きるおそれがあります。影響を受けるのは Cisco Cyber Vision、Cisco Open Source Snort3、Cisco Secure Firewall Threat Defense (FTD) Software、Cisco UTD SNORT IPS Engine Software です。修正を含むソフトウェアが公開されているため、最新の情報を確認してください。
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
Cisco Snort 3 の内部レビューで見つかった脆弱性により、権限が適切に管理されない問題（CWE-269）が起きるおそれがあります。影響を受けるのは Cisco Cyber Vision、Cisco Open Source Snort3、Cisco Secure Firewall Threat Defense (FTD) Software、Cisco UTD SNORT IPS Engine Software です。修正を含むソフトウェアが公開されているため、最新の情報を確認してください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Cyber Vision | — | — |
| Cisco | Cisco Open Source Snort3 | — | — |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | — | — |
| Cisco | Cisco UTD SNORT IPS Engine Software | — | — |
Original description The description as published by the source.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the Common Weakness Enumeration (CWE) Base CWE-269.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web psirt@cisco.com
- web nvd.nist.gov
- web github.com