Known vulnerabilities in Suricata

Software: Suricata
Software CPE: cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Suricata Suricata is affected by 103 known vulnerabilities: 9 high, 83 medium, 11 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144422 - Incorrect Comparison
CVE-2026-71855
CWE-697 Medium
No
No
7.0.17, 8.0.6 20.08.2026 SB2026072203
#VU144421 - Inefficient Algorithmic Complexity
CVE-2026-71418
CWE-407 Medium
No
No
8.0.6 20.08.2026 SB2026072203
#VU139052 - Unquoted Search Path or Element
CVE-2026-57223
CWE-428 Low
No
No
7.0.17, 8.0.6 22.07.2026 SB2026072203
#VU139051 - Incorrect Comparison
CVE-2026-57222
CWE-697 Medium
No
No
7.0.17, 8.0.6 22.07.2026 SB2026072203
#VU139049 - Improper Initialization
CVE-2026-57229
CWE-665 Medium
No
No
8.0.6 22.07.2026 SB2026072203
#VU139048 - Out-of-bounds read
CVE-2026-57228
CWE-125 High
No
No
7.0.17 22.07.2026 SB2026072203
#VU139047 - Allocation of Resources Without Limits or Throttling
CVE-2026-57227
CWE-770 Medium
No
No
7.0.17, 8.0.6 22.07.2026 SB2026072203
#VU139046 - Heap-based Buffer Overflow
CVE-2026-57226
CWE-122 Low
No
No
7.0.17, 8.0.6 22.07.2026 SB2026072203
#VU139045 - NULL Pointer Dereference
CVE-2026-57225
CWE-476 Low
No
No
8.0.6 22.07.2026 SB2026072203
#VU139044 - Allocation of Resources Without Limits or Throttling
CVE-2026-57224
CWE-770 Medium
No
No
8.0.6 22.07.2026 SB2026072203
#VU139043 - Heap-based Buffer Overflow
CVE-2026-63451
CWE-122 Low
No
No
8.0.6 22.07.2026 SB2026072203
#VU139042 - Improper Handling of Exceptional Conditions
CVE-2026-63450
CWE-755 Low
No
No
8.0.6 22.07.2026 SB2026072203
#VU139041 - Missing release of memory after effective lifetime
CVE-2026-63446
CWE-401 Medium
No
No
8.0.6 22.07.2026 SB2026072203
#VU139040 - Inefficient Algorithmic Complexity
CVE-2026-63447
CWE-407 Medium
No
No
8.0.6 22.07.2026 SB2026072203
#VU139039 - Resource exhaustion
CVE-2026-63448
CWE-400 Medium
No
No
7.0.17, 8.0.6 22.07.2026 SB2026072203
#VU139038 - Numeric Truncation Error
CVE-2026-63449
CWE-197 Low
No
No
8.0.6 22.07.2026 SB2026072203
#VU139037 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-63452
CWE-409 Medium
No
No
8.0.6 22.07.2026 SB2026072203
#VU133271 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-46387
CWE-409 Medium
No
No
7.0.16, 8.0.5 03.06.2026 SB2026060304
#VU133270 - Out-of-bounds write
CVE-2026-45770
CWE-787 Medium
No
No
8.0.5 03.06.2026 SB2026060304
#VU133269 - Deadlock
CVE-2026-46352
CWE-833 Medium
No
No
8.0.5 03.06.2026 SB2026060304


Showing elements 1 - 20 out of 103