suricata vulnerabilities and fixes

Recent CVEs affecting suricata, with upgrade or downgrade steps. 41 tracked.

suricata has 41 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 40. Most recent: 2026-09-20. Highest priority: CVE-2026-45769 (score 51/100).

• CVE-2026-31931 HIGH 7.5 UPGRADE Suricata is a network IDS, IPS and NSM engine
• CVE-2026-31933 HIGH 7.5 UPGRADE Suricata is a network IDS, IPS and NSM engine
• CVE-2026-31937 HIGH 7.5 UPGRADE Suricata is a network IDS, IPS and NSM engine
• CVE-2026-31932 HIGH 7.5 UPGRADE Suricata is a network IDS, IPS and NSM engine
• CVE-2026-31934 HIGH 7.5 UPGRADE Suricata is a network IDS, IPS and NSM engine
• CVE-2026-31935 HIGH 7.5 UPGRADE Suricata is a network IDS, IPS and NSM engine
• CVE-2026-57222 MEDIUM 5.3 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-57223 HIGH 7.0 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-57227 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-57228 HIGH 8.2 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45751 MEDIUM 5.9 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45752 MEDIUM 5.9 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45762 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-46387 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45747 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45763 MEDIUM 5.9 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-63452 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-71418 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-71855 MEDIUM 5.9 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-57224 MEDIUM 6.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-57226 LOW 3.7 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-57225 LOW 3.3 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-57229 MEDIUM 5.3 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-63446 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-63447 HIGH 7.5 DOWNGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-63448 MEDIUM 5.9 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-63449 LOW 3.7 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-63450 LOW 3.7 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-63451 LOW 3.3 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-46352 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-94083 CRITICAL 9.4 UPGRADE Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the H
• CVE-2026-94084 CRITICAL 9.4 UPGRADE Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that
• CVE-2026-45767 MEDIUM 4.4 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45766 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45765 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45764 CRITICAL 9.1 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45761 LOW 3.3 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45759 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45768 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45769 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring
• CVE-2026-45770 HIGH 7.5 UPGRADE Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring

FAQ

How do I fix suricata vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is suricata being exploited right now?

None of the tracked suricata CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which suricata CVE should I patch first?

CVE-2026-45769 currently ranks highest (51/100): Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring .

RSS feed for suricata · ← Back to latest CVEs