PT-2026-4995 · Open Information Security Foundation · Suricata

Catenacyber · Published 2026-01-01 · Updated 2026-01-27 · CVE-2026-22263

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.2

Description Suricata is a network IDS, IPS and NSM engine. An inefficiency in http1 headers parsing, present in versions starting from 8.0.0 and prior to 8.0.3, can cause performance slowdown when processing multiple packets. Version 8.0.3 resolves this issue.

Recommendations Update to Suricata version 8.0.3 or later.

Exploit

Fix

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-1050

CWE-400

CWE-770

Related Identifiers

BDU:2026-00954

CVE-2026-22263

GHSA-RWC5-HXJ6-HWX7

OPENSUSE-SU-2026:10082-1

Affected Products

Suricata

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22263.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7 · Vendor Advisory
• https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428 · Patch
• https://ubuntu.com/security/CVE-2026-22263 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-22263 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-22263 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-22263 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00954 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10082-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22263 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-22263 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-22263 · Vendor Advisory
• https://github.com/OISF/suricata/commit/50cac2e2465ca211eabfa156623e585e9037bb7e%20https://github.com/OISF/suricata/commit/63225d5f8ef64cc65164c0bb1800730842d54942 · Note
• https://github.com/OISF/suricata/security/advisories/GHSA-878h-2x6v-84q9%20https://redmine.openinfosecfoundation.org/login?back_url=https%3A%2F%2Fredmine.openinfosecfoundation.org%2Fissues%2F8181 · Note
• https://suse.com/security/cve/CVE-2025-64333 · Note