Description

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, various inefficiencies in xff handling, especially for alerts not triggered in a tx, can lead to severe slowdowns. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, disable XFF support in the eve configuration. The setting is disabled by default.

INFO

Published Date :

2026-01-27T18:10:27.881Z

Last Modified :

2026-01-27T18:24:24.317Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2026-22261 vulnerability.

Vendors Products
Oisf
  • Suricata
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-22261.

URL Resource
https://github.com/OISF/suricata/commit/3f0725b34c7871c2de4346c8af872f10f4501e44 cve-icon cve-icon cve-icon
https://github.com/OISF/suricata/commit/af246ae7ab1b70c09f83c0619b253095ccc18667 cve-icon cve-icon cve-icon
https://github.com/OISF/suricata/security/advisories/GHSA-5jvg-5j3p-34cf cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-22261 cve-icon
https://redmine.openinfosecfoundation.org/issues/8156 cve-icon cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-22261 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact