Cisco Utd Snort Ips Engine Software vulnerabilities

4 CVEs affecting Cisco Utd Snort Ips Engine Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20027, published 2026-01-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1285, published 2024-11-18. High severity, CVSS 7.4. EPSS: 2.9% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine that could allow an unauthenticated, adjacent attacker to cause a denial of…
CVE-2021-1494, published 2024-11-15. Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The…
CVE-2026-20026, published 2026-01-07. Medium severity, CVSS 5.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak…
CVE-2026-20027, published 2026-01-07. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak…