Network Intrusion Detection System Vulnerability in Suricata by Open Information Security Foundation
CVE-2026-57227
7.5HIGH
What is CVE-2026-57227?
The Suricata network Intrusion Detection System features a vulnerability in its MQTT parser that allows an unlimited number of PUBREC or PUBREL messages to be appended to a transaction. This can lead to excessive resource consumption, including CPU and memory, potentially resulting in system slowdowns or denial of service. The issue affects versions 7.0.0 through 7.0.17 and version 8.0.6. To mitigate the risk, users are strongly encouraged to upgrade to versions 7.0.17 or 8.0.6 or later.
Affected Version(s)
suricata >= 8.0.0, < 8.0.6 < 8.0.0, 8.0.6
suricata >= 7.0.0, < 7.0.17 < 7.0.0, 7.0.17