PT-2026-22968 · Cisco · Cisco Snort 3 Detection Engine

Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-20005

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco Snort 3 Detection Engine (affected versions not specified)

Description A flaw exists in the Snort 3 Detection Engine that may allow a remote, unauthenticated attacker to disrupt packet inspection. This is caused by the incomplete parsing of SSL handshake packets. An attacker could exploit this by sending specially crafted SSL handshake packets, potentially leading to a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-392

Related Identifiers

CVE-2026-20005

Affected Products

Cisco Snort 3 Detection Engine

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-20005 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-multi-dos-XFWkWSwz · Vendor Advisory
• https://twitter.com/CVEnew/status/2029272829074506105 · Twitter Post