CVE-2026-76489

published 2026-10-21

CVE-2026-76489: Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker…

Priority P4 34 medium 5.8 CVSS 3.1

AV N AC L PR N UI N S C C N I N A L

Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.

This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.

Affected

162 ranges · showing 25

Vendor	Product	Version range	Fixed in
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—
cisco	cisco_open_source_snort3	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-401