CVE-2026-45766
published 2026-09-10CVE-2026-45766: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5…
PriorityP342high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.62%
48.9th percentile
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oisf | suricata | < 7.0.16 | 7.0.16 |
| oisf | suricata | — | — |
| oisf | suricata | >= 7.0.0 < 7.0.16 | 7.0.16 |
| oisf | suricata | >= 8.0.0 < 8.0.5 | 8.0.5 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
OISF Suricata up to 7.0.15/8.0.4 NFS Parser denial of service
vuldb·2026-09-11·CVSS 7.5
CVE-2026-45766 [HIGH] OISF Suricata up to 7.0.15/8.0.4 NFS Parser denial of service
A vulnerability categorized as critical has been discovered in OISF Suricata up to 7.0.15/8.0.4. The affected element is an unknown function of the component NFS Parser. Executing a manipulation can lead to denial of service.
This vulnerability appears as CVE-2026-45766. The attack may be performed from remote. There is no available exploit.
It is advisable to upgrade the affected component.
Red Hat
suricata: Suricata: Denial of Service via unbounded NFS parser state structures
vendor_redhat·2026-09-10·CVSS 7.5
CVE-2026-45766 [HIGH] CWE-770 suricata: Suricata: Denial of Service via unbounded NFS parser state structures
suricata: Suricata: Denial of Service via unbounded NFS parser state structures
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
A flaw was found in Suricata, a network Intrusion Detection System. Insufficiently bounded Network File System (NFS) parser state structures can be exploited by a remote attacker sending crafted NFS traffic. This can cause Suricata to consume excessive memory, leading t
No detection rules found.
No public exploits indexed.
2026-09-10
Published