Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-21 | 1 | Patch1 |
| 2026-04-02 | 1 | Disclosure1 |
| 2026-05-04 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos Suricata ❗ CVE-2026-31935 ❗ CVE-2026-31934 ❗ CVE-2026-31931 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-suricata/ https://t.co/ZPigNQ9ACF
Post summary
The post lists three CVEs affecting Suricata and directs readers to additional information, but it provides no technical details, PoC, exploit code, or mitigation guidance.
『These are security releases, fixing a number of important issues.』 CVE-2026-31935 CVE-2026-31934 CVE-2026-31931 CVE-2026-31933 CVE-2026-31932 CVE-2026-31937 Suricata 8.0.4 and 7.0.15 released! - Suricata https://suricata.io/2026/03/17/suricata-8-0-4-and-7-0-15-released/
Post summary
The post announces Suricata security releases that address several CVEs, emphasizing the availability of patches for critical issues.
CVE-2026-31934 Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encod… https://www.cve.org/CVERecord?id=CVE-2026-31934
Post summary
The message reports a quadratic complexity vulnerability in Suricata 8.0.0–8.0.3 when parsing MIME-encoded URLs, with no PoC, exploit, or patch details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oisf | suricata | - | - | - |