Vulnerability Description
Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, Suricata can crash with a stack overflow. Version 8.0.3 patches the issue. As a workaround, use default values for `request-body-limit` and `response-body-limit`.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oisf | Suricata | >= 8.0.0, < 8.0.3 |
Related Weaknesses (CWE)
References
- https://github.com/OISF/suricata/commit/0dddac7278c8b9cf3c1e4c1c71e620a78ec1c185Patch
- https://github.com/OISF/suricata/security/advisories/GHSA-3gm8-84cm-5x22Vendor Advisory
- https://redmine.openinfosecfoundation.org/issues/8185Permissions Required
FAQ
What is CVE-2026-22260?
CVE-2026-22260 is a vulnerability with a CVSS score of 7.5 (HIGH). Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, Suricata can crash with a stack overflow. Version 8.0.3 patches the issue. As a workaround, use def...
How severe is CVE-2026-22260?
CVE-2026-22260 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-22260?
Check the references section above for vendor advisories and patch information. Affected products include: Oisf Suricata.