CVE-2026-20054

Name of the Vulnerable Software and Affected Versions Cisco Snort 3 (affected versions not specified)

Description A flaw exists in the Snort 3 VBA feature that may allow a remote, unauthenticated attacker to crash the Snort 3 Detection Engine. This is caused by insufficient error checking during VBA data decompression. An attacker could exploit this by sending specially crafted VBA data to the engine, potentially leading to a denial-of-service (DoS) condition where the engine enters an infinite loop.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.