Cisco discloses CVE-2026-76524: Open Source Snort 3 control channel socket allows local arbitrary command execution
Cisco disclosed CVE-2026-76524, a high-severity vulnerability in the control channel socket implementation of Open Source Snort 3. An authenticated local attacker with low privileges could execute arbitrary commands as the Snort 3 process user. A successful exploit also allows reading and writing Snort 3 process memory. Cisco has released…