CVE-2026-20218

Name of the Vulnerable Software and Affected Versions Cisco products (affected versions not specified)

Description An issue exists in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine. This is caused by improper range checking during the decompression of user-controlled VBA data. A remote, unauthenticated attacker could exploit this by sending specially crafted VBA data to the Snort 3 Detection Engine, leading to a stack data overflow. This can cause the engine to restart unexpectedly, resulting in a denial of service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.