CVE-2026-76445Medium· 5.3▾ SunlitMultiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) co…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition.
The vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers are processed within the codec. An attacker could exploit this vulnerability by sending a crafted, fragmented UDP datagram that contains these headers to the Snort 3 Detection Engine of an affected device. A successful exploit could allow the attacker to cause the detection engine to enter an infinite loop, resulting in a DoS condition.
open_source_snort3 3.12.2.0open_source_snort3 3.1.2.0open_source_snort3 3.1.3.0open_source_snort3 3.1.4.0open_source_snort3 3.1.5.0open_source_snort3 3.1.6.0open_source_snort3 3.1.7.0open_source_snort3 3.1.8.0open_source_snort3 3.1.9.0open_source_snort3 3.1.10.0open_source_snort3 3.1.12.0open_source_snort3 3.1.13.0open_source_snort3 3.1.14.0open_source_snort3 3.1.15.0open_source_snort3 3.1.16.0open_source_snort3 3.1.17.0open_source_snort3 3.1.18.0open_source_snort3 3.1.19.0open_source_snort3 3.1.20.0open_source_snort3 3.1.21.0open_source_snort3 3.1.22.0open_source_snort3 3.1.23.0open_source_snort3 3.1.24.0open_source_snort3 3.1.25.0open_source_snort3 3.1.27.0open_source_snort3 3.1.28.0open_source_snort3 3.1.29.0open_source_snort3 3.1.30.0open_source_snort3 3.1.31.0open_source_snort3 3.1.32.0open_source_snort3 3.1.36.0open_source_snort3 3.1.38.0open_source_snort3 3.1.39.0open_source_snort3 3.1.40.0open_source_snort3 3.1.41.0open_source_snort3 3.1.42.0open_source_snort3 3.1.43.0open_source_snort3 3.1.45.0open_source_snort3 3.1.47.0open_source_snort3 3.1.48.0open_source_snort3 3.1.50.0open_source_snort3 3.1.51.0open_source_snort3 3.1.52.0open_source_snort3 3.1.53.0open_source_snort3 3.1.55.0open_source_snort3 3.1.56.0open_source_snort3 3.1.57.0open_source_snort3 3.1.58.0open_source_snort3 3.1.59.0open_source_snort3 3.1.60.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-20019Medium· 5.8Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities
CVE-2026-20011Medium· 5.8Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
CVE-2026-20179Medium· 5.8Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities
CVE-2026-20197Medium· 5.8Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability
CVE-2026-20218Medium· 5.8Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
CVE-2026-76489Medium· 5.8Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability