Skip to content
Sign in
7.5 High

CVE-2026-57227 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted MQTT traffic can grow transaction state indefinitely, consuming CPU and memory and causing slowdown or denial of service. This issue is fixed in versions 8.0.6 and 7.0.17.

Affected products and versions

Product Affected versions Fixed in
suricata 8.0 8.0.0 → < 8.0.6 8.0.6
suricata 7.0 7.0.0 → < 7.0.17 7.0.17

Other CVEs of suricata

The 86 CVEs of suricata →
CVE-2026-94084 Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use… 9.4 Critical CVE-2026-94083 Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state… 9.4 Critical CVE-2026-71855 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine 5.9 Medium CVE-2026-71418 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine 7.5 High
Track this CVE