O
Vendor security profile
OISF
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs37
Critical3
CISA KEV0
Public exploit6
Patch rate%57
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
35
0
CVE KEV
CVE severity distribution
37toplam CVE
Critical3 (8%)
High19 (51%)
Medium9 (24%)
Low6 (16%)
Patch and exploitation view
%57
Verified patch
%0
CISA KEV
%16
Public exploit
21Patch available
0Partial
0Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
9.4
CVE-2026-94084
Use after free in OISF Suricata
O
Patch verifiedEPSS %1
9.4
CVE-2026-94083
Vulnerability in OISF Suricata
O
Patch verifiedEPSS %1
5.9
CVE-2026-71855
Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state
O
Patch verifiedEPSS %0
7.5
CVE-2026-71418
Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption
O
Patch verifiedEPSS %1
7.0
CVE-2026-57223
Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation
O
Patch verifiedEPSS %0
7.5
CVE-2026-63446
Suricata app-layer: passed flows can retain transactions, causing resource exhaustion
O
Patch verifiedEPSS %1
7.5
CVE-2026-63447
Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption
O
Patch verifiedEPSS %1
5.9
CVE-2026-63448
Suricata smb: some SMB flows can cause resource exhaustion
O
Patch verifiedEPSS %0
5.3
CVE-2026-57229
Suricata smtp/mime: incomplete state reset allows detection bypass
O
Patch verifiedEPSS %0
3.3
CVE-2026-57225
Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading
O
Patch verifiedEPSS %0