ZDI-26-045 MEDIUM 5.3 Published Jan 28, 2026

Cisco Snort _bnfa_search_csparse_nfa Out-Of-Bounds Read Information Disclosure Vulnerability

Cisco

Cisco Snort contains a medium-severity information disclosure vulnerability (CVE-2026-20027) that allows unauthenticated remote attackers to access sensitive data on affected systems. An attacker can exploit this flaw without needing credentials, making it accessible to any network-connected threat actor. Security teams should prioritize patching Cisco Snort installations and monitor for any suspicious reconnaissance or data exfiltration attempts targeting their intrusion detection systems.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy