CVE-2026-45769

[CVE catalog]

Severity

High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Published

May 28, 2026, 12:00:00 AM UTC

Updated

Sep 10, 2026, 10:16:56 PM UTC

Source

[NVD] · [CVE record]

EPSS

1.79% · Oct 25, 2026

A flaw was found in Suricata, a network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring engine. A remote attacker can exploit this vulnerability by sending repeated crafted User Datagram Protocol (UDP) traffic to the IKEv2 parser. This can cause the Suricata engine to consume excessive memory, leading to a denial of service (DoS) for the affected system. The vulnerability in Suricata, rated as Important, allows a remote attacker to cause a denial of service by sending specially crafted UDP traffic. This can lead to unbounded memory growth within the IKEv2 parser, consuming excessive resources and potentially crashing the Suricata engine. This impact is significant in environments where Suricata is deployed for network intrusion detection or prevention. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.