Improper Check for Unusual or Exceptional Conditions in Suricata - #VU162656
Published: November 9, 2026
Vulnerability identifier: #VU162656
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-754
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to bypass PostgreSQL query rules and request logging for an affected flow.
The vulnerability exists due to failed recovery in Suricata's PostgreSQL parser when valid PostgreSQL traffic follows a to-server TCP reassembly gap. An unauthenticated remote attacker can send valid PostgreSQL traffic after such a gap to permanently disable request inspection for that flow in deployments with PostgreSQL parsing enabled.
Affected software
Suricata
Remediation
Install security update from vendor's website.
Suricata - update to 8.0.7