High severity7.5NVD Advisory· Published Sep 16, 2026

CVE-2026-46352

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protocol whose payload is itself fragmented. Version 8.0.5 contains a fix. No known workarounds are available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oisf/Suricatallm-fuzzy
Range: <8.0.5, >=8.0.0
osv-coords
pkg:rpm/opensuse/suricata&distro=openSUSE%20Tumbleweed
Range: < 8.0.5-1.1

Patches

Vulnerability mechanics

References

forum.suricata.io/t/suricata-8-0-5-and-7-0-16-released/6315nvd
github.com/OISF/suricata/security/advisories/GHSA-rc34-46x6-mxxmnvd
redmine.openinfosecfoundation.org/issues/8550nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000