Live › vulnerability › CVE-2026-20236
Go to dashboardCisco's Snort 3 network intrusion detection software has several internally found flaws in incorrect calculation logic (CWE-682), fixed in hardening releases. The sources do not say what an attacker can do with them.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Snort 3 as an intrusion detection or prevention engine are the ones to check. The sources do not say which configurations or versions are vulnerable.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.
This page as .md · .json · in your agent: get_signal("CVE-2026-20236")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.