High severity7.5NVD Advisory· Published Sep 10, 2026· Updated Sep 16, 2026
CVE-2026-45766
CVE-2026-45766
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3- forum.suricata.io/t/suricata-8-0-5-and-7-0-16-released/6315nvdRelease NotesVendor Advisory
- github.com/OISF/suricata/security/advisories/GHSA-jqr4-ch38-wvm6nvdThird Party Advisory
- redmine.openinfosecfoundation.org/issues/8418nvdPermissions Required
News mentions
1- Suricata: 15 Vulnerabilities Disclosed, Ranging from Critical to LowVypr Intelligence · Sep 10, 2026