cvedb.io
CVE-2026-31935
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2026-04-02T15:16:37.657 · Last modified 2026-06-17T10:34:48.270

Summary

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.

Affected products

oisf — suricata

Does this affect you?

Add your gear to cvedb and we'll alert you only when oisf ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.