VulnerabilityAnalyzed

CVE-2026-22263

Suricata is a network IDS, IPS and NSM engine.

MEDIUM 5.3EPSS 0.42%

Does this matter?

Lower severity and a low EPSS score (0.42%). Track it; it rarely justifies an emergency change on its own.

Description

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS: 0.42% probability · 35th percentile
CISA KEV: Not listed
Weakness: CWE-1050
Affected: oisf/suricata
Source: security-advisories@github.com

References

https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428Patch
https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7Vendor Advisory
https://redmine.openinfosecfoundation.org/issues/8201Permissions Required

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.