Denial of Service Vulnerability in Cisco Snort 3 Detection Engine

CVE-2026-20067

What is CVE-2026-20067?

Multiple Cisco products are impacted by a vulnerability in the Snort 3 detection engine that may allow an unauthenticated remote attacker to interrupt packet inspection. This issue arises from insufficient error checking during the parsing of Multicast DNS fields in the HTTP header. By sending specially crafted HTTP packets through an established connection, an attacker could exploit this vulnerability, leading to an unexpected restart of the Snort 3 Detection Engine and resulting in a denial of service condition.

References