CVE-2026-20356
No fix known EPSS <1%CVSS 7.5
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20356 are related to issues concerning uncontrolled resource consumption that are grouped under the Common Weakness Enumeration (CWE) Base CWE-400.
Products: Cisco Cyber Vision, Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco UTD SNORT IPS Engine Software