CVE-2026-20218: Cisco reports an unauthenticated remote denial-of-service flaw in the Snort 3 VBA decompression engine. Crafted VBA data can restart the detection engine. CVSS 5.8.
It affects Secure Firewall Threat Defense and open-source Snort 3. No known exploitation. Upgrade to fixed Snort 3 releases; VBA decompression is off by default.