Denial of Service Vulnerability in Cisco Snort 3
CVE-2026-76489

5.8MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Open Source Snort3
Cisco Secure Firewall Threat Defense (ftd) Software
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76489?

A vulnerability has been identified in the memory management of Cisco's Snort 3, which could be exploited by an unauthenticated, remote attacker. This issue stems from inadequate error checking during file processing that may lead to unreleased memory resources. An attacker could send a multitude of files for processing, potentially causing the Snort 3 Detection Engine to restart unexpectedly. This interruption in service may result in a Denial of Service condition, affecting network packet inspection capabilities.

Affected Version(s)

Cisco Open Source Snort3 3.12.2.0

Cisco Open Source Snort3 3.1.2.0

Cisco Open Source Snort3 3.1.3.0

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.