Skip to main content
HIGH

CVE-2026-45769

CVSS v3

7.5

HIGH

EPSS Score

1.2 %

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 fix the issue. Some workarounds are available. Disable IKE application-layer parsing if it is not needed. Alternatively, u

Technical details

CVSS v3 Vector
3.1
Published
2026-09-10
Last Modified
2026-09-11

Frequently asked questions

What is CVE-2026-45769?

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 fix the issue. Some workarounds are available. Disable IKE application-layer parsing if it is not needed. Alternatively, u

Is CVE-2026-45769 actively exploited?

Active exploitation of CVE-2026-45769 has not been confirmed. The EPSS score is 1.2%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-45769?

CVE-2026-45769 has a CVSS v3 base score of 7.5 (HIGH severity), with vector string 3.1.

Is CVE-2026-45769 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

No credit card required · 500 free checks/month · Free API key