Product by OISF
OISF Suricata
101 known vulnerabilities in OISF Suricata (OISF), 0 of them actively exploited (CISA KEV).
Key figures
101
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-45769 | ikev2: unbounded client transform storage can lead to resource exhaustion | 7.5 | |
| High | CVE-2020-19678 | OISF Suricata: Path Traversal | 7.5 | |
| Critical | CVE-2019-18792 | OISF Suricata: security vulnerability | 9.1 | |
| Critical | CVE-2018-10244 | OISF Suricata: Integer Overflow | 9.8 | |
| Critical | CVE-2021-37592 | OISF Suricata: security vulnerability | 9.8 | |
| High | CVE-2019-1010251 | Open Information Security Foundation Suricata: Denial of Service | 7.5 | |
| Critical | CVE-2026-45764 | Suricata http2: protocol-change type confusion can lead to denial of service | 9.1 | |
| High | CVE-2021-35063 | OISF Suricata: security vulnerability | 7.5 | |
| Critical | CVE-2026-94084 | OISF Suricata: Use After Free | 9.4 | |
| Critical | CVE-2026-94083 | OISF Suricata: Type Confusion | 9.4 | |
| High | CVE-2026-46387 | Suricata http2: decompression bomb can cause denial of service in Suricata | 7.5 | |
| High | CVE-2026-45759 | Suricata http1: quadratic Content-Disposition processing can lead to denial of service | 7.5 | |
| High | CVE-2021-45098 | OISF Suricata: security vulnerability | 7.5 | |
| High | CVE-2026-57227 | Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages | 7.5 | |
| High | CVE-2026-63446 | Suricata app-layer: passed flows can retain transactions, causing resource exhaustion | 7.5 | |
| High | CVE-2026-45768 | Suricata ldap: unbounded responses per transaction can lead to resource exhaustion | 7.5 | |
| High | CVE-2019-18625 | OISF Suricata: security vulnerability | 7.5 | |
| High | CVE-2026-63447 | Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption | 7.5 | |
| High | CVE-2026-63452 | Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption | 7.5 | |
| Critical | CVE-2023-35853 | OISF Suricata: security vulnerability | 9.8 | |
| High | CVE-2026-71418 | Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption | 7.5 | |
| High | CVE-2026-45766 | Suricata nfs: unbounded stateful structures can lead to resource exhaustion | 7.5 | |
| High | CVE-2026-45765 | Suricata dnp3: unbounded reassembly can lead to resource exhaustion | 7.5 | |
| High | CVE-2026-45762 | Suricata defrag: missing address-family check can lead to remote crash | 7.5 | |
| High | CVE-2018-10242 | OISF Suricata: security vulnerability | 7.5 |