Cisco Snort 3 GTP codec flaw (CVE-2026-76445) lets remote attackers trigger infinite loop and DoS via fragmented UDP
Cisco disclosed CVE-2026-76445, a medium-severity vulnerability in the Snort 3 Detection Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send a crafted, fragmented UDP datagram containing GPRS Tunneling Protocol (GTP) extension headers. This makes the detection engine enter an infinite loop and restart…