ZDI-26-045
MEDIUM 5.3
Published
Jan 28, 2026
Cisco Snort _bnfa_search_csparse_nfa Out-Of-Bounds Read Information Disclosure Vulnerability
Cisco
Cisco Snort contains a medium-severity information disclosure vulnerability (CVE-2026-20027) that allows unauthenticated remote attackers to access sensitive data on affected systems. An attacker can exploit this flaw without needing credentials, making it accessible to any network-connected threat actor. Security teams should prioritize patching Cisco Snort installations and monitor for any suspicious reconnaissance or data exfiltration attempts targeting their intrusion detection systems.