Medium severity5.3OSV Advisory· Published Jan 27, 2026· Updated Jun 17, 2026

CVE-2026-22263

Description

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oisf/SuricataOSV3 versions
suricata-8.0.0, suricata-8.0.1, suricata-8.0.2+ 2 more
- (no CPE)range: suricata-8.0.0, suricata-8.0.1, suricata-8.0.2
- cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*range: >=8.0.0,<8.0.3
- (no CPE)range: >=8.0.0,<8.0.3
osv-coords
pkg:rpm/opensuse/suricata&distro=openSUSE%20Tumbleweed
Range: < 8.0.3-1.1

Patches

Vulnerability mechanics

References

github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428nvdPatch
github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7nvdVendor Advisory
redmine.openinfosecfoundation.org/issues/8201nvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000