Summary
generated automatically from NVD dataCVE-2026-20043 covers out-of-bounds write issues (CWE-787) in the open source Snort 3 software, found during an internal security review by Cisco's Snort 3 engineering team. The review led to software hardening releases that address multiple internally discovered vulnerabilities. The flaw carries a CVSS v3.1 score of 9.0 (CRITICAL), with a network attack vector and no privileges or user interaction required. NVD has not yet listed affected products.
NVD description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20043 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 21 oct. 2026
- Updated
- 21 oct. 2026
- Status
- Awaiting Analysis
- Source
- psirt@cisco.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-787
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.