Cisco Open Source Snort3 vulnerabilities

CVE-2026-20043 [CRITICAL] CWE-787 CVE-2026-20043: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Ope As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2

CVE-2026-76524 [HIGH] CWE-306 CVE-2026-76524: A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the Snort control channel socket. An attacker could exploit

CVE-2026-20291 [HIGH] CWE-269 CVE-2026-20291: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Ope As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-

CVE-2026-20356 [HIGH] CWE-400 CVE-2026-20356: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Ope As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-

CVE-2026-20236 [HIGH] CWE-682 CVE-2026-20236: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Ope As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-

CVE-2026-20218 [MEDIUM] CWE-121 CVE-2026-20218: A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper range checking when Snort 3 decompres

CVE-2026-20019 [MEDIUM] CWE-835 CVE-2026-20019: Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 parses UDP Netflow Protocol pack

CVE-2026-20179 [MEDIUM] CWE-128 CVE-2026-20179: Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 pars

CVE-2026-20197 [MEDIUM] CWE-119 CVE-2026-20197: Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 parses Teredo packets. An attacker

CVE-2026-20221 [MEDIUM] CWE-476 CVE-2026-20221: Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) t Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability is due to improper handling of nested GRE traffic. An

CVE-2026-20011 [MEDIUM] CWE-805 CVE-2026-20011: Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed. An attacker could exploit this vulnerability by sendi

CVE-2026-76489 [MEDIUM] CWE-401 CVE-2026-76489: Multiple Cisco products are affected by a vulnerability in the memory management implementation of S Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 processes files, whic

CVE-2026-76445 [MEDIUM] CWE-835 CVE-2026-76445: Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could a Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling