CVE-2026-22260: Suricata http1: infinite recursion in decompression

Q: What is the severity of CVE-2026-22260?

CVE-2026-22260 has a high severity due to the potential for a stack overflow causing Suricata to crash.

Q: How do I fix CVE-2026-22260?

To fix CVE-2026-22260, you should upgrade Suricata to version 8.0.3 or later.

Q: What versions of Suricata are impacted by CVE-2026-22260?

Suricata versions 8.0.0 to 8.0.2 are impacted by CVE-2026-22260.

Q: What happens if CVE-2026-22260 is exploited?

Exploiting CVE-2026-22260 can lead to an infinite recursion causing a stack overflow, resulting in a crash of the Suricata service.

Q: Are there any workarounds for CVE-2026-22260 besides upgrading?

Yes, as a temporary workaround, you can use default values for 'request-body-limit' and 'response-body-limit' settings.

Published Jan 27, 2026

Updated

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, Suricata can crash with a stack overflow. Version 8.0.3 patches the issue. As a workaround, use default values for request-body-limit and response-body-limit.

Affected Software

2 affected components

Suricata Suricata>=8.0.0<8.0.3

OISF Suricata>=8.0.0<8.0.3

Remediation

Patch Available

https://github.com/OISF/suricata/commit/0dddac7278c8b9cf3c1e4c1c71e620a78ec1c185

Event History

Jan 27, 2026

CVE Published

via MITRE·05:30 PM

Data Sourced

via MITRE·05:30 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jul 15, 58060

Event

via FIRST·04:58 AM

Frequently Asked Questions

What is the severity of CVE-2026-22260?

CVE-2026-22260 has a high severity due to the potential for a stack overflow causing Suricata to crash.

How do I fix CVE-2026-22260?

To fix CVE-2026-22260, you should upgrade Suricata to version 8.0.3 or later.

What versions of Suricata are impacted by CVE-2026-22260?