Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of the "tls.alpn" rule keyword can cause Suricata to crash with a NULL dereference. This issue has been patched in version 8.0.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-21 | 1 | Patch1 |
| 2026-04-02 | 1 | Disclosure1 |
| 2026-05-04 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos Suricata ❗ CVE-2026-31935 ❗ CVE-2026-31934 ❗ CVE-2026-31931 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-suricata/ https://t.co/ZPigNQ9ACF
Post summary
The tweet announces three new CVE vulnerabilities affecting Suricata products, directing readers to external links for further details.
『These are security releases, fixing a number of important issues.』 CVE-2026-31935 CVE-2026-31934 CVE-2026-31931 CVE-2026-31933 CVE-2026-31932 CVE-2026-31937 Suricata 8.0.4 and 7.0.15 released! - Suricata https://suricata.io/2026/03/17/suricata-8-0-4-and-7-0-15-released/
Post summary
The text announces new Suricata releases that fix several CVEs, but it does not provide technical details, PoCs, or evidence of exploitation.
CVE-2026-31931 Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of the "tls.alpn" rule keyword can cause Suricata to crash with a NULL … https://www.cve.org/CVERecord?id=CVE-2026-31931
Post summary
This post discloses a denial‑of‑service vulnerability in Suricata versions 8.0.0‑8.0.3, where the 'tls.alpn' rule keyword triggers a crash due to a null‑pointer dereference; a CVE record is linked and affected versions noted.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oisf | suricata | - | - | - |