Cisco Snort OLE VBA bug allows unauthenticated remote code execution
ZDI rates stack-overflow CVE-2026-20218 at CVSS 8.1 and says authentication is not required.
62
- Mentions · 7d1
- Mentions · 30d2
- All mentions3
- First seenAug 11, 2026
- Last mentioned3d ago
Timeline
3 articles · newest firstCisco Advance Notification for Publication of October 21, 2026, Security Advisories
Cisco will publish October 21, 2026 advisories and fixes for Expressway, IOS XR, Secure Client, Snort, and UC products.
24
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
Microsoft's August 2026 Patch Tuesday fixes 421 vulnerabilities across its products, including 62 rated critical; Cisco Talos published analysis and matching Snort rules.
55
Related CVEs
by mentions- A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote…
Appears with
- Ciscovendor · 3
- Cisco ASR 9000product · 1
- Cisco Expresswayproduct · 1
- Zero Day Initiativeorganization · 1
- Cisco Talosorganization · 1
- Microsoftvendor · 1
- Cisco IOS XRproduct · 1
- Microsoft Patch Tuesdayproduct · 1
- Cisco PSIRTorganization · 1
- Cisco Unified Communicationsproduct · 1
- Cisco Secure Clientproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.