CVE-2026-22263

—

CVSS 3.1

5.3 medium

EPSS

<1%p35

Published

Jan 27, 2026 (Jan 27, 2026)

Modified

Jun 17, 2026

Description

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.

Vendors: oisf
Products: suricata
Weakness: CWE-1050
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.