---
id: CVE-2026-46352
title: >-
  Suricata is a network Intrusion Detection System, Intrusion Prevention System
  and Network Security Monitoring engine
summary: >-
  Suricata is a network Intrusion Detection System, Intrusion Prevention System
  and Network Security Monitoring engine. Starting in version 8.0.0 and prior to
  version 8.0.5, Suricata's IP defragmentation code could deadlock when
  processing…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-833
vendor: OISF
product: suricata
affected:
  - 'suricata >= 8.0.0, < 8.0.5'
published: '2026-09-16'
updated: '2026-09-23'
sourceUpdated: '2026-09-23T18:12:04.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-46352'
references:
  - url: 'https://forum.suricata.io/t/suricata-8-0-5-and-7-0-16-released/6315'
    label: security-advisories@github.com
  - url: 'https://github.com/OISF/suricata/security/advisories/GHSA-rc34-46x6-mxxm'
    label: security-advisories@github.com
  - url: 'https://redmine.openinfosecfoundation.org/issues/8550'
    label: security-advisories@github.com
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46352.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-46352'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-46352'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-46352'
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
epss: 0.00464
epssPercentile: 0.39467
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-17T16:14:56.344099Z'
ingestedAt: '2026-09-16T19:02:30.736Z'
---

## Overview

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protocol whose payload is itself fragmented. Version 8.0.5 contains a fix. No known workarounds are available.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · updated 2026-09-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46352.json)