VDB
CVE-2026-22263
CVE-2026-22263
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.
EPSS 0.42% · 34.7th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.42%
34.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| OISF | suricata | >= 8.0.0, < 8.0.3, * |
| oisf | suricata | 8.0.0, 8.0.0, 8.0.0 |
Timeline
- Jan 14, 2026 CVE Published
- Jan 14, 2026 PoC Published
- Jan 28, 2026 EPSS Score
- Jan 30, 2026 CVE Updated
- Jan 30, 2026 Security Advisory
- Jan 31, 2026 EPSS Score
- Feb 2, 2026 EPSS Score
- Feb 5, 2026 EPSS Score
- Feb 7, 2026 EPSS Score
- Feb 10, 2026 EPSS Score
- Feb 13, 2026 EPSS Score
- Feb 15, 2026 EPSS Score