CVE-2026-76489
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
Published:Oct 21, 2026
Last Modified:Oct 22, 2026
EPS:Oct 21, 2026
EPSS Score:0.00316
CVSS Score:5.8
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Cisco Open Source Snort3
Cisco
Cisco Open Source Snort3
Vendor
Cisco
Product
Cisco Secure Firewall Threat Defense (ftd) Software
Cisco
Cisco Secure Firewall Threat Defense (ftd) Software
Vendor
Cisco
Product
Secure Firewall Threat Defense
Cisco
Secure Firewall Threat Defense
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
