CVE-2026-20027

Name of the Vulnerable Software and Affected Versions Cisco products (affected versions not specified)

Description A flaw exists in the processing of DCE/RPC requests that may allow a remote attacker to obtain sensitive information or cause the Snort 3 Detection Engine to restart, leading to an interruption of packet inspection. This is due to an error in buffer handling logic when processing DCE/RPC requests, resulting in a buffer out-of-bounds read. An attacker could exploit this by sending numerous DCE/RPC requests through an established connection inspected by Snort 3. The vulnerability could allow an attacker to obtain sensitive information from the Snort 3 data stream.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.