What is CVE-2026-22263?

CVE-2026-22263 is a medium-severity vulnerability in Oisf Suricata, classified under CWE-1050. CVSS score: 5.3/10. Published 2026-01-27.

How severe is CVE-2026-22263?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Oisf Suricata

CVE-2026-22263

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds ar…

EPSS: 0.000 (7.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Oisf Suricata — versions >= 8.0.0, < 8.0.3

Weakness classification (CWE)

CWE-1050

References

https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7 (x_refsource_CONFIRM)
https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428 (x_refsource_MISC)
https://redmine.openinfosecfoundation.org/issues/8201 (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-22263?: CVE-2026-22263 is a medium-severity vulnerability in Oisf Suricata, classified under CWE-1050. CVSS score: 5.3/10. Published 2026-01-27.
How severe is CVE-2026-22263?: Medium severity. CVSS v3 base score is 5.3 out of 10.