CVE-2026-22263
Medium · 5.3CVSS
5.3
EPSS
0.5%
Published
Jan 27, 2026
CISA due date
—
The record
Suricata http1: quadratic complexity in headers parsing over multiple packets
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | suricata | 0 | 8.0.3-1.1 |
Related vulnerabilities
- CVE-2026-31934 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31937 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31935 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31931 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31932 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-31933 Suricata is a network IDS, IPS and NSM engine. Also affects suricata
- CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion Also affects suricata
- CVE-2026-22262 Suricata datasets: stack overflow when saving a set Also affects suricata