Cisco Snort header unfolding flaw enables remote code execution
Unauthenticated remote code execution vulnerability in Cisco Snort with CVSS 9.8.
Stories per day · 30 days
3 RSS
Relatedcisco12denial-of-service5ios-xr3rce3buffer-overflow2expressway2out-of-bounds2secure-client2advance-notification1command-execution1cwe-7871detection-bypass1detection-engine1ftd1gre1gtp1hardening1ids1
11 stories, newest first · one card per story
Stories tagged #snort
Cisco patches 34 flaws, including critical Expressway RCE CVE-2026-76466
Fixes include Expressway X15.5.20 and Snort 3.12.4.0; Cisco says none are known to be exploited.
6
Cisco Snort OLE VBA bug allows unauthenticated remote code execution
ZDI rates stack-overflow CVE-2026-20218 at CVSS 8.1 and says authentication is not required.
Cyber Centre flags Cisco flaws in several products (AV26-1073)
Named fixes include Expressway X15.5.20, Snort 3.12.4.0, Cyber Vision 5.6.0, and Secure Client 5.1.20.333.
Snort 3 VBA decompression bug can crash Cisco detection engines
Crafted VBA data can overflow stack data and restart the Snort 3 Detection Engine; Cisco has released updates.
Snort 3 control socket lets low-privilege local users run commands
Missing socket authentication also allows reading and writing Snort 3 process memory; Cisco has updates and no workaround.
Talos tracks two unauthenticated PHP core RCEs called php2shell
Talos had not seen exploitation as of October 21 and says about half of PHP systems may never be patched.
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
Cisco will publish October 21, 2026 advisories and fixes for Expressway, IOS XR, Secure Client, Snort, and UC products.
Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability
Cisco fixed an SSL certificate parsing flaw in FTD's Snort 2 engine letting unauthenticated remote attackers force detection engine restarts.
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Microsoft's September 2026 Patch Tuesday fixes 973 vulnerabilities, including 113 critical, with two Windows privilege-escalation bugs (CVE-2026-81963, CVE-2026-85880) exploited in the wild.
4
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
Microsoft's August 2026 Patch Tuesday fixes 421 vulnerabilities across its products, including 62 rated critical; Cisco Talos published analysis and matching Snort rules.