{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Cisco Open Source Snort3: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/cisco--cisco-open-source-snort3/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/cisco--cisco-open-source-snort3/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-76524/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-76524/",
   "title": "CVE-2026-76524 · Cisco Open Source Snort3 · disclosed",
   "content_text": "A vulnerability in the control channel socket implementation of\u0026nbsp;Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user.\r\n\r\nThis vulnerability is due to a lack of authentication when a local user connects to the Snort control channel socket. An attacker could exploit this vulnerability by connecting to the Snort 3 control channel socket as a local user. A successful exploit could allow the attacker to execute arbitrary commands as well as read and write Snort 3 process memory.",
   "date_published": "2026-10-21T16:18:12Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-20356/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-20356/",
   "title": "CVE-2026-20356 · Cisco Cyber Vision · disclosed",
   "content_text": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20356 are related to issues concerning uncontrolled resource consumption that are grouped under the Common Weakness Enumeration (CWE) Base CWE-400.",
   "date_published": "2026-10-21T16:13:06Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-20236/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-20236/",
   "title": "CVE-2026-20236 · Cisco Cyber Vision · disclosed",
   "content_text": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20236 are related to issues concerning incorrect calculation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-682.",
   "date_published": "2026-10-21T16:12:58Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-20291/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-20291/",
   "title": "CVE-2026-20291 · Cisco Cyber Vision · disclosed",
   "content_text": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20291 are related to issues concerning improper privilege management that are grouped under the Common Weakness Enumeration (CWE) Base CWE-269.",
   "date_published": "2026-10-21T16:12:53Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-20043/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-20043/",
   "title": "CVE-2026-20043 · Cisco Cyber Vision · disclosed",
   "content_text": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20043 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.",
   "date_published": "2026-10-21T16:12:29Z"
  }
 ]
}