CVE-2026-76489

Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability

Published Oct 21, 2026 CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Description
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.

This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Cisco
Cisco cisco Open Source Snort3
Cisco cisco Secure Firewall Threat Defense (ftd) Software
Cisco secure Firewall Threat Defense
Vendors & Products Cisco
Cisco cisco Open Source Snort3
Cisco cisco Secure Firewall Threat Defense (ftd) Software
Cisco secure Firewall Threat Defense
Type Values Removed Values Added
Description Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
Title Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability
Weaknesses CWE-401
References
Metrics cvssV3_1

{'score': 5.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Oct 22, 2026, 7:11 PM
Reserved
Aug 19, 2026, 12:02 PM
Status
Awaiting Analysis
Published
Oct 21, 2026, 5:19 PM
Modified
Oct 22, 2026, 2:17 PM