Out-of-Bounds Write Vulnerability in Cisco Snort 3 Software
CVE-2026-20043

9CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Cyber Vision
Cisco Open Source Snort3
Cisco Secure Firewall Threat Defense (ftd) Software
Cisco Utd Snort Ips Engine Software
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-20043?

Cisco's Open Source Snort 3 software has been found to have vulnerabilities that allow for out-of-bounds write issues, classified under the Common Weakness Enumeration as CWE-787. This vulnerability poses risks to the integrity and security of the software, potentially allowing unauthorized access or manipulation of memory. Cisco's proactive security measures have led to the release of hardening updates designed to address these vulnerabilities, enhancing the software's resilience against potential attacks.

Affected Version(s)

Cisco Cyber Vision 3.0.0

Cisco Cyber Vision 3.0.2

Cisco Cyber Vision 3.0.3

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.