Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2026-22263 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2026-22263

CVE-2026-22263

MEDIUM5.3

Suricata http1: quadratic complexity in headers parsing over multiple packets

Published Jan 27, 2026

Modified 1 months ago

Details

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.

References

https://github.com/OISF/suricata/commit/018a377f74e3eb2b042c6f783ad9043060923428

https://github.com/OISF/suricata/security/advisories/GHSA-rwc5-hxj6-hwx7

https://redmine.openinfosecfoundation.org/issues/8201

https://www.cve.org/CVERecord?id=CVE-2026-22263

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

LowA:L

5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedJan 27, 2026

ModifiedJan 27, 2026