Cisco patches 34 flaws, including critical Expressway RCE CVE-2026-76466
Fixes include Expressway X15.5.20 and Snort 3.12.4.0; Cisco says none are known to be exploited.
72
CVE-2026-20236
Incorrect-calculation denial of service in Cisco Snort 3
- CVSS 3.1
- 7.5 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Cisco's internal review of open-source Snort 3 found incorrect-calculation flaws (CWE-682). A remote attacker can trigger them over the network with no authentication or user interaction, causing a high-impact denial of service and no confidentiality or integrity impact. Deployments of the affected Snort 3 software are at risk.
What to do: Apply Cisco's software hardening update for CVE-2026-20236. Cisco has not listed a fixed version or workaround.
| Product | Affected |
|---|---|
| Cisco Open Source Snort 3 Software | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.
- Weakness
- CWE-682
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H