Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-21 | 1 | Patch1 |
| 2026-04-02 | 1 | Disclosure1 |
| 2026-05-04 | 1 | General1 |
⚠️ Vulnerabilidades en productos Suricata ❗ CVE-2026-31935 ❗ CVE-2026-31934 ❗ CVE-2026-31931 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-suricata/ https://t.co/ZPigNQ9ACF
Post summary
The tweet announces three CVEs affecting Suricata products but offers no additional technical detail, PoC, or exploit information.
『These are security releases, fixing a number of important issues.』 CVE-2026-31935 CVE-2026-31934 CVE-2026-31931 CVE-2026-31933 CVE-2026-31932 CVE-2026-31937 Suricata 8.0.4 and 7.0.15 released! - Suricata https://suricata.io/2026/03/17/suricata-8-0-4-and-7-0-15-released/
Post summary
The text announces Suricata's new releases, noting they patch several CVEs.
CVE-2026-31935 Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually … https://www.cve.org/CVERecord?id=CVE-2026-31935
Post summary
The tweet outlines a memory‑exhaustion vulnerability in Suricata (CVE‑2026‑31935) caused by flooding crafted HTTP/2 continuation frames, without mentioning patches, exploits, or PoCs.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oisf | suricata | - | - | - |