CVE-2026-20057

Name of the Vulnerable Software and Affected Versions Cisco Snort 3 (affected versions not specified)

Description A flaw exists in the Snort 3 Visual Basic for Applications (VBA) feature that could allow a remote, unauthenticated attacker to crash the Snort 3 Detection Engine. This is caused by insufficient error checking during VBA data decompression. An attacker could exploit this by sending specially crafted VBA data to the engine, leading to a denial of service (DoS) condition and unexpected restarts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.