Cisco Snort 3 Vulnerability Leading to Sensitive Data Disclosure

Cisco disclosed two medium-severity Snort 3 vulnerabilities (CVE-2026-20026 — use-after-free causing engine restarts/DoS; CVE-2026-20027 — out-of-bounds read enabling data leakage) that impact open-source Snort 3 and multiple Cisco products (Secure Firewall/FTD, IOS XE with UTD, Meraki MX). Exploitation requires crafted DCE/RPC requests; Cisco reports no active exploitation, no mitigations besides patches, and provides fixes/hotfixes and scheduled updates — organizations should prioritize immediate patching.