Improper Initialization in Suricata - CVE-2026-57229
Published: July 22, 2026
Vulnerability identifier: #VU139049
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-57229
CWE-ID: CWE-665
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass detection rules based on file data, file names, or extracted URLs.
The vulnerability exists due to improper initialization in the SMTP MIME parser when processing Content-Type: message/rfc822 encapsulation. A remote attacker can send a crafted SMTP MIME message to bypass detection rules based on file data, file names, or extracted URLs.
The issue occurs when SMTP MIME decoding is enabled.
Affected software
Suricata
How to mitigate CVE-2026-57229
Install security update from vendor's website.
Suricata - update to 8.0.6