CVE-2026-76489

MediumCVSS 5.8/10Last modified Oct 22, 2026

Description

Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.

Metrics

CVSS 3.1 5.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 21, 2026
Last modified
Oct 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-76497.5The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-CVE-2026-764908.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764917.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764927.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764937.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764947.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764957.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764967.0As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764976.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764989.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APICVE-2026-764999.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APICVE-2026-76506.4The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `e
CVE-2026-76489: Medium severity, CVSS 5.8 | Vulnix