CVE-2026-76524 Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-76524?
CVE-2026-76524 is a high-severity vulnerability in Cisco Open Source Snort3, published on 21 Oct 2026.
Official description
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the Snort control channel socket. An attacker could exploit this vulnerability by connecting to the Snort 3 control channel socket as a local user. A successful exploit could allow the attacker to execute arbitrary commands as well as read and write Snort 3 process memory.
Weakness: CWE-306
Which versions are affected by CVE-2026-76524?
How do I fix CVE-2026-76524?
No fix has been published for CVE-2026-76524 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-76524 being exploited?
There is no known exploitation of CVE-2026-76524 in the wild and no public exploit code.
Sources
Also known as GHSA-4376-j46p-qqm7.