Cisco Snort header unfolding flaw enables remote code execution
Original title: ZDI-26-867: Cisco Snort sf_unfold_header Out-Of-Bounds Write Remote Code Execution Vulnerability
Unauthenticated remote code execution vulnerability in Cisco Snort with CVSS 9.8.
This vulnerability in Cisco Snort allows remote attackers to execute arbitrary code without authentication. The ZDI assigned a CVSS rating of 9.8 and listed CVE-2026-20043.
- Authentication is not required for exploitation.
- Affects Cisco Snort.
- ZDI CVSS rating of 9.8.
- CVE-2026-20043 assigned.
Impact: remote arbitrary code execution via out-of-bounds write
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20043 | Out-of-bounds write in Cisco open-source Snort 3 | 9.0 | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.