What’s Vulnerable › Products
OISF suricata vulnerabilities
100 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 69 published in the last 12 months.
Check whether your OISF suricata version is affected
Latest OISF suricata vulnerabilities
- CVE-2026-94084 — (CVSS 9.4)
- CVE-2026-94083 — (CVSS 9.4)
- CVE-2026-71855 — Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state (CVSS 7.5)
- CVE-2026-71418 — Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption (CVSS 7.5)
- CVE-2026-63452 — Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption (CVSS 7.5)
- CVE-2026-63451 — Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load (CVSS 5.5)
- CVE-2026-63450 — Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection (CVSS 5.3)
- CVE-2026-63449 — Suricata sip: large SIP message bodies can evade detection with frame keyword (CVSS 5.3)
- CVE-2026-63448 — Suricata smb: some SMB flows can cause resource exhaustion (CVSS 7.5)
- CVE-2026-63447 — Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption (CVSS 7.5)
- CVE-2026-63446 — Suricata app-layer: passed flows can retain transactions, causing resource exhaustion (CVSS 7.5)
- CVE-2026-57229 — Suricata smtp/mime: incomplete state reset allows detection bypass (CVSS 5.3)
- CVE-2026-57228 — Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder (CVSS 9.1)
- CVE-2026-57227 — Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages (CVSS 7.5)
- CVE-2026-57225 — Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading (CVSS 5.5)
- CVE-2026-57223 — Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation (CVSS 7.0)
- CVE-2026-57226 — Suricata swf: heap buffer overflow in SWF decompression depth handling (CVSS 5.9)
- CVE-2026-57224 — Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion (CVSS 6.5)
- CVE-2026-57222 — Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6 (CVSS 5.3)
- CVE-2026-46352 — Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock (CVSS 7.5)
- CVE-2026-45770 — Suricata lua: excessive flow variable registration can bypass sandbox (CVSS 7.5)
- CVE-2026-45769 — ikev2: unbounded client transform storage can lead to resource exhaustion (CVSS 7.5)
- CVE-2026-45768 — Suricata ldap: unbounded responses per transaction can lead to resource exhaustion (CVSS 7.5)
- CVE-2026-45767 — Suricata datasets: save to absolute filename can be bypassed when combined with load command (CVSS 4.4)
- CVE-2026-45766 — Suricata nfs: unbounded stateful structures can lead to resource exhaustion (CVSS 7.5)