Cisco Snort 3 VBA Decompression Engine Buffer Overflow (CVE-2026-20218) Allows Unauthenticated Remote DoS
Cisco disclosed CVE-2026-20218, a stack buffer overflow in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send crafted VBA data to a targeted device, causing the Snort 3 Detection Engine to restart unexpectedly and producing a denial of ser…