Cisco patches 34 flaws, including critical Expressway RCE CVE-2026-76466
Fixes include Expressway X15.5.20 and Snort 3.12.4.0; Cisco says none are known to be exploited.
72
Product
Snort 3
- Mentions · 7d8
- Mentions · 30d8
- All mentions8
- First seenOct 21, 2026
- Last mentioned3d ago
Timeline
8 articles · newest firstCyber Centre flags Cisco flaws in several products (AV26-1073)
Named fixes include Expressway X15.5.20, Snort 3.12.4.0, Cyber Vision 5.6.0, and Secure Client 5.1.20.333.
36
Cisco Snort 3 SMTP MIME flaw can restart the detection engine
An unauthenticated attacker can send crafted SMTP packets that make Snort 3 restart; Cisco has updates and no workarounds.
48
Snort 3 VBA decompression bug can crash Cisco detection engines
Crafted VBA data can overflow stack data and restart the Snort 3 Detection Engine; Cisco has released updates.
58
Snort 3 flaws in multiple Cisco products can cause denial of service
Unauthenticated remote attackers can force the Snort 3 Detection Engine to restart; Cisco shipped updates and has no workarounds.
55
Snort 3 GTP header flaw can restart Cisco detection engines
A crafted fragmented UDP datagram with GTP extension headers can put the Snort 3 Detection Engine into an infinite loop.
50
Cisco Snort 3 GRE flaw can restart the detection engine
Crafted nested GRE traffic can reload Snort 3 and cause either detection bypass or denial of service, depending on configuration.
55
Cisco ships Snort 3 hardening for CVE-2026-20043 out-of-bounds writes
An internal Snort 3 review grouped multiple out-of-bounds write issues, CWE-787, under CVE-2026-20043.
46
Related CVEs
by mentions- Out-of-bounds write in Cisco open-source Snort 3
- Resource lifetime issues in Cisco UC products (CWE-74)
- Improper authentication in multiple Cisco UC products
- Unauthenticated root RCE in Cisco Expressway database service
- XSS in Cisco Unified Communications products
- Incorrect-calculation denial of service in Cisco Snort 3
- Unauthenticated DoS in Cisco IOS XR IPv4 for-us handling
- A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated…
Appears with
- Ciscovendor · 8
- Unity Connectionproduct · 2
- Secure Clientproduct · 2
- Expressway Seriesproduct · 2
- Snort 3 Detection Engineproduct · 1
- Secure Firewall Threat Defense (FTD)product · 1
- Canadian Centre for Cyber Securityorganization · 1
- IOS XRproduct · 1
- Cyber Visionproduct · 1
- IOS XR Softwareproduct · 1
- Unified CMproduct · 1
- Unified Communications Managerproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.