Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspectId() in src/app-layer-parser.c uses an inverted guard and marks only already-inspected transactions as inspected. On flows passed by a pass rule or pass-the-flow exception policy, detection is skipped, so completed transactions remain unmarked, are never freed, and are repeatedly rescanned. The per-flow list can grow without bound with quadratic cleanup cost, causing CPU and memory exhaustion. This issue is fixed in version 8.0.6.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-63446 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransac… https://www.cve.org/CVERecord?id=CVE-2026-63446
Post summary
The text discloses CVE-2026-63446 in Suricata, specifying the vulnerable versions from 8.0.0 to 8.0.6, but provides no PoC, exploit, patch, or active exploitation details.
CVE-2026-63446 Suricata 8.0.0-8.0.6: inverted guard in AppLayerParserSetTransactionInspectId() skips detection on pass-rule flows. Unfreed transactions rescan endlessly, risking memory exhaustion/DoS. CVSS 7.5, unpatched. Update https://www.valtersit.com/cve/CVE-2026-63446/ #CVE #infosec #Suricata #Suricata #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The text announces CVE-2026-63446, detailing technical aspects of a denial-of-service vulnerability in Suricata 8.0.0-8.0.6, including the root cause and CVSS score, while noting that the issue remains unpatched.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oisf | suricata | - | - | - |