{
  "cveId": "CVE-2026-46352",
  "url": "https://patchblox.com/security/cve/CVE-2026-46352",
  "summary": "CVE-2026-46352 is fixed in suricata on 1 platform by DEBIAN-CVE-2026-46352 (version 1:8.0.5-1), released September 11, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "suricata: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine",
  "description": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata\u0027s IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protocol whose payload is itself fragmented. Version 8.0.5 contains a fix. No known workarounds are available.",
  "published": "2026-09-16T19:17:17Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.0047,
  "epssPercentile": 0.40928,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "suricata",
      "release": "Debian 14",
      "fixedVersion": "1:8.0.5-1",
      "fix": "DEBIAN-CVE-2026-46352",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-46352",
      "released": "2026-09-11T12:23:55Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}