{
  "cveId": "CVE-2026-31933",
  "url": "https://patchblox.com/security/cve/CVE-2026-31933",
  "summary": "CVE-2026-31933 is fixed in suricata on 1 platform, first by DEBIAN-CVE-2026-31933, released April 2, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "suricata: Suricata is a network IDS, IPS and NSM engine",
  "description": "Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.",
  "published": "2026-04-02T14:16:28Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00365,
  "epssPercentile": 0.30519,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "suricata",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1:7.0.10-1\u002Bdeb13u4",
      "fix": "DEBIAN-CVE-2026-31933",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-31933",
      "released": "2026-04-02T14:16:28Z"
    },
    {
      "platform": "linux",
      "product": "suricata",
      "release": "Debian 14",
      "fixedVersion": "1:8.0.4-1",
      "fix": "DEBIAN-CVE-2026-31933",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-31933",
      "released": "2026-04-02T14:16:28Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}