Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-20027 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerability is due to an error in buffer handling logic when processing DCE/RPC requests, which can result in a buffer out-of-bounds read. An attacker could exploit this vulnerability by sending a large number of DCE/RPC requests through an established connection that is inspected by Snort 3. A successful exploit could allow the attacker to obtain sensitive information in the Snort 3 data stream.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:9.1 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CNA: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH	[email protected]	AdvisoryBundleRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	[email protected]

Affected Products

Product	Versions
Cisco Snort 3	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Cisco Secure Firewall Threat Defense	All versions
CPE cpe:2.3:o:cisco:firepower_threat_defense:::::::: cpe:2.3:a:cisco:firepower_threat_defense_software:::::::: cpe:2.3:a:cisco:firepower_threat_defense:::::::: cpe:2.3:a:cisco:firepower_threat_defense_virtual:::::::: Remediation No remediation found in references.
Cisco 1000 Series Integrated Services Routers	All versions
CPE cpe:2.3:h:cisco:1000_integrated_services_router:::::::: Remediation No remediation found in references.
Cisco 4000 Series Integrated Services Routers	All versions
CPE cpe:2.3:h:cisco:4000_integrated_services_router:::::::: cpe:2.3:h:cisco:isr_4000:::::::: Remediation No remediation found in references.
Cisco Catalyst 8000V	All versions
CPE cpe:2.3:a:cisco:catalyst_8000v_edge:::::::: Remediation No remediation found in references.
Cisco Catalyst 8200 Series	All versions
CPE cpe:2.3:h:cisco:catalyst_8200:::::::: Remediation No remediation found in references.
Cisco Catalyst 8300 Series	All versions
CPE cpe:2.3:h:cisco:catalyst_8300:::::::: cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:::::::: cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:::::::: cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:::::::: cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:::::::: Remediation No remediation found in references.
Cisco Catalyst 8500L	All versions
CPE cpe:2.3:h:cisco:catalyst_8500l:::::::: cpe:2.3:h:cisco:catalyst_8500-4qc:::::::: Remediation No remediation found in references.
Cisco Cloud Services Router 1000V	All versions
CPE cpe:2.3:a:cisco:cloud_services_router_1000v:::::::: Remediation No remediation found in references.
Cisco Integrated Services Virtual Routers	All versions
CPE cpe:2.3:h:cisco:integrated_services_virtual_router:::::::: Remediation No remediation found in references.
Cisco MX67	All versions
CPE cpe:2.3:h:cisco:meraki_mx67:::::::: Remediation No remediation found in references.
Cisco MX67C	All versions
CPE cpe:2.3:h:cisco:meraki_mx67c:::::::: Remediation No remediation found in references.
Cisco MX67W	All versions
CPE cpe:2.3:h:cisco:meraki_mx67w:::::::: Remediation No remediation found in references.
Cisco MX68	All versions
CPE cpe:2.3:h:cisco:meraki_mx68:::::::: Remediation No remediation found in references.
Cisco MX68CW	All versions
CPE cpe:2.3:h:cisco:meraki_mx68cw:::::::: Remediation No remediation found in references.
Cisco MX68W	All versions
CPE cpe:2.3:h:cisco:meraki_mx68w:::::::: Remediation No remediation found in references.
Cisco MX75	All versions
CPE cpe:2.3:h:cisco:meraki_mx75:::::::: Remediation No remediation found in references.
Cisco MX84	All versions
CPE cpe:2.3:h:cisco:meraki_mx84:::::::: Remediation No remediation found in references.
Cisco MX85	All versions
CPE cpe:2.3:h:cisco:meraki_mx85:::::::: Remediation No remediation found in references.
Cisco MX95	All versions
CPE cpe:2.3:h:cisco:meraki_mx95:::::::: Remediation No remediation found in references.
Cisco MX100	All versions
CPE cpe:2.3:h:cisco:meraki_mx100:::::::: Remediation No remediation found in references.
Cisco MX105	All versions
CPE cpe:2.3:h:cisco:meraki_mx105:::::::: Remediation No remediation found in references.
Cisco MX250	All versions
CPE cpe:2.3:h:cisco:meraki_mx250:::::::: Remediation No remediation found in references.
Cisco MX400	All versions
CPE cpe:2.3:h:cisco:meraki_mx400:::::::: Remediation No remediation found in references.
Cisco MX450	All versions
CPE cpe:2.3:h:cisco:meraki_mx450:::::::: Remediation No remediation found in references.
Cisco MX600	All versions
CPE cpe:2.3:h:cisco:meraki_mx600:::::::: Remediation No remediation found in references.
Cisco MX Z4	All versions
CPE cpe:2.3:h:cisco:meraki_z4:::::::: Remediation No remediation found in references.
Cisco MX vMX	All versions
CPE cpe:2.3:h:cisco:meraki_vmx:::::::: Remediation No remediation found in references.
Cisco IOS XE	All versions
CPE cpe:2.3:a:cisco:ios_xe:::::::: Remediation No remediation found in references.

Change History

3 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Jan 7, 2026	New CVE Received	[email protected]

CVE-2026-20027 Details

ANALYZED

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO