Live › vulnerability › CVE-2026-20356
Go to dashboardCisco's internal review of Open Source Snort 3 found several flaws that consume resources without limit (CWE-400), fixed in hardening releases. The sources do not say what triggers them or what an attacker gets beyond resource exhaustion.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Snort 3 as an intrusion detection or prevention engine. The sources do not say which configurations or traffic patterns trigger the resource exhaustion, so whether a given deployment is exposed is unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20356 are related to issues concerning uncontrolled resource consumption that are grouped under the Common Weakness Enumeration (CWE) Base CWE-400.
This page as .md · .json · in your agent: get_signal("CVE-2026-20356")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.