{"schema_version":1,"title":"OISF vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 30 vulnerabilities in OISF: 2 in the last 7 days and 30 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-94084, was published on 20 September 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/oisf","json_url":"https://junglewise.ai/threats/vendors/oisf.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/oisf","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":16,"all_time":30,"critical":3,"exploited":0,"last_7_days":2,"last_30_days":29,"last_90_days":30,"last_365_days":30},"latest":[{"cve":"CVE-2026-94084","cvss":9.4,"epss":0.0054,"slug":"cve-2026-94084-suricata-before-8-0-7-has-an-http2threadmultibuf-use-after-free","title":"Suricata use-after-free in HTTP/2 response header detection","severity":"critical","exploited":false,"published_at":"2026-09-20T02:16:53.717+00:00","url":"https://junglewise.ai/threats/cve-2026-94084-suricata-before-8-0-7-has-an-http2threadmultibuf-use-after-free"},{"cve":"CVE-2026-94083","cvss":9.4,"epss":0.0054,"slug":"cve-2026-94083-suricata-before-8-0-7-has-a-doh2-type-confusion-that-can-cause-an","title":"Suricata DoH2 type confusion in HTTP state cleanup","severity":"critical","exploited":false,"published_at":"2026-09-20T02:16:53.52+00:00","url":"https://junglewise.ai/threats/cve-2026-94083-suricata-before-8-0-7-has-a-doh2-type-confusion-that-can-cause-an"},{"cve":"CVE-2026-71855","cvss":5.9,"epss":0.0052,"slug":"cve-2026-71855-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata IP family validation bypass in flow comparison","severity":"medium","exploited":false,"published_at":"2026-09-18T21:18:08.75+00:00","url":"https://junglewise.ai/threats/cve-2026-71855-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-71418","cvss":7.5,"epss":0.0063,"slug":"cve-2026-71418-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata DNS-over-HTTP/2 buffer memory handling denial of service","severity":"high","exploited":false,"published_at":"2026-09-18T21:18:08.59+00:00","url":"https://junglewise.ai/threats/cve-2026-71418-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-63452","cvss":7.5,"epss":0.0063,"slug":"cve-2026-63452-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata HTTP/1 compression bomb denial of service","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:04.667+00:00","url":"https://junglewise.ai/threats/cve-2026-63452-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-63448","cvss":5.9,"epss":0.0072,"slug":"cve-2026-63448-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata SMB parser unbounded transaction accumulation DoS","severity":"medium","exploited":false,"published_at":"2026-09-18T21:17:04.06+00:00","url":"https://junglewise.ai/threats/cve-2026-63448-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-63447","cvss":7.5,"epss":0.0063,"slug":"cve-2026-63447-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata FTP parser denial of service via transaction limit bypass","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:03.913+00:00","url":"https://junglewise.ai/threats/cve-2026-63447-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-63446","cvss":7.5,"epss":0.0068,"slug":"cve-2026-63446-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata inverted flag logic in transaction cleanup","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:03.763+00:00","url":"https://junglewise.ai/threats/cve-2026-63446-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-57229","cvss":5.3,"epss":0.0041,"slug":"cve-2026-57229-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata SMTP MIME parser state reset flaw","severity":"medium","exploited":false,"published_at":"2026-09-18T21:17:01.537+00:00","url":"https://junglewise.ai/threats/cve-2026-57229-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-57228","cvss":8.2,"epss":0.0057,"slug":"cve-2026-57228-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata out-of-bounds read in MIME quoted-printable decoder","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:01.367+00:00","url":"https://junglewise.ai/threats/cve-2026-57228-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-57227","cvss":7.5,"epss":0.007,"slug":"cve-2026-57227-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata MQTT parser resource exhaustion in transaction handling","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:01.217+00:00","url":"https://junglewise.ai/threats/cve-2026-57227-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-57223","cvss":7,"epss":0.0015,"slug":"cve-2026-57223-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata unquoted service path privilege escalation on Windows","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:00.787+00:00","url":"https://junglewise.ai/threats/cve-2026-57223-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-57224","cvss":6.5,"epss":0.0041,"slug":"cve-2026-57224-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata DHCP and RDP parser transaction leak causing DoS","severity":"medium","exploited":false,"published_at":"2026-09-18T20:17:17.78+00:00","url":"https://junglewise.ai/threats/cve-2026-57224-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-57222","cvss":5.3,"epss":0.0044,"slug":"cve-2026-57222-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata IPv4/IPv6 address hash collision in IP pair tracking","severity":"medium","exploited":false,"published_at":"2026-09-18T20:17:17.613+00:00","url":"https://junglewise.ai/threats/cve-2026-57222-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-45770","cvss":7.5,"epss":0.0048,"slug":"cve-2026-45770-suricata-lua-sandbox-bypass-via-excessive-flow-variables","title":"Suricata Lua sandbox bypass via excessive flow variables","severity":"high","exploited":false,"published_at":"2026-09-10T22:16:57.117+00:00","url":"https://junglewise.ai/threats/cve-2026-45770-suricata-lua-sandbox-bypass-via-excessive-flow-variables"},{"cve":"CVE-2026-45769","cvss":7.5,"epss":0.0179,"slug":"cve-2026-45769-suricata-ikev2-parser-unbounded-memory-consumption","title":"Suricata IKEv2 parser unbounded memory consumption","severity":"high","exploited":false,"published_at":"2026-09-10T22:16:56.97+00:00","url":"https://junglewise.ai/threats/cve-2026-45769-suricata-ikev2-parser-unbounded-memory-consumption"},{"cve":"CVE-2026-45768","cvss":7.5,"epss":0.007,"slug":"cve-2026-45768-suricata-unbounded-ldap-response-buffering-denial-of-service","title":"Suricata unbounded LDAP response buffering denial of service","severity":"high","exploited":false,"published_at":"2026-09-10T22:16:56.827+00:00","url":"https://junglewise.ai/threats/cve-2026-45768-suricata-unbounded-ldap-response-buffering-denial-of-service"},{"cve":"CVE-2026-45767","cvss":4.4,"epss":0.004,"slug":"cve-2026-45767-suricata-path-traversal-in-rule-load-save-command","title":"Suricata path traversal in rule load/save command","severity":"medium","exploited":false,"published_at":"2026-09-10T22:16:56.683+00:00","url":"https://junglewise.ai/threats/cve-2026-45767-suricata-path-traversal-in-rule-load-save-command"},{"cve":"CVE-2026-45766","cvss":7.5,"epss":0.0062,"slug":"cve-2026-45766-suricata-nfs-parser-unbounded-state-memory-exhaustion","title":"Suricata NFS parser unbounded state memory exhaustion","severity":"high","exploited":false,"published_at":"2026-09-10T22:16:56.54+00:00","url":"https://junglewise.ai/threats/cve-2026-45766-suricata-nfs-parser-unbounded-state-memory-exhaustion"},{"cve":"CVE-2026-45765","cvss":7.5,"epss":0.0062,"slug":"cve-2026-45765-suricata-dnp3-unbounded-reassembly-denial-of-service","title":"Suricata DNP3 unbounded reassembly denial of service","severity":"high","exploited":false,"published_at":"2026-09-10T22:16:56.397+00:00","url":"https://junglewise.ai/threats/cve-2026-45765-suricata-dnp3-unbounded-reassembly-denial-of-service"},{"cve":"CVE-2026-45764","cvss":9.1,"epss":0.0063,"slug":"cve-2026-45764-suricata-http-2-type-confusion-denial-of-service","title":"Suricata HTTP/2 type confusion denial of service","severity":"critical","exploited":false,"published_at":"2026-09-10T22:16:56.25+00:00","url":"https://junglewise.ai/threats/cve-2026-45764-suricata-http-2-type-confusion-denial-of-service"},{"cve":"CVE-2026-45762","cvss":7.5,"epss":0.0061,"slug":"cve-2026-45762-suricata-ip-defragmentation-denial-of-service","title":"Suricata IP defragmentation denial of service","severity":"high","exploited":false,"published_at":"2026-09-10T22:16:56.1+00:00","url":"https://junglewise.ai/threats/cve-2026-45762-suricata-ip-defragmentation-denial-of-service"},{"cve":"CVE-2026-45761","cvss":3.3,"epss":0.0018,"slug":"cve-2026-45761-suricata-heap-buffer-overflow-in-rule-parsing","title":"Suricata heap buffer overflow in rule parsing","severity":"low","exploited":false,"published_at":"2026-09-10T21:17:27.677+00:00","url":"https://junglewise.ai/threats/cve-2026-45761-suricata-heap-buffer-overflow-in-rule-parsing"},{"cve":"CVE-2026-45759","cvss":7.5,"epss":0.0084,"slug":"cve-2026-45759-suricata-http-content-disposition-denial-of-service","title":"Suricata HTTP Content-Disposition denial of service","severity":"high","exploited":false,"published_at":"2026-09-10T21:17:27.543+00:00","url":"https://junglewise.ai/threats/cve-2026-45759-suricata-http-content-disposition-denial-of-service"},{"cve":"CVE-2026-45752","cvss":5.9,"epss":0.0052,"slug":"cve-2026-45752-suricata-use-after-free-in-decompress-transforms","title":"Suricata use-after-free in decompress transforms","severity":"medium","exploited":false,"published_at":"2026-09-10T21:17:27.403+00:00","url":"https://junglewise.ai/threats/cve-2026-45752-suricata-use-after-free-in-decompress-transforms"}],"vendor":{"hub":true,"name":"OISF","slug":"oisf","homepage":"https://oisf.net/","description":"The Open Information Security Foundation (OISF) is a non-profit organization dedicated to building and maintaining open-source security technologies.","url":"https://junglewise.ai/threats/vendors/oisf"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":1,"exploited":0,"vulnerabilities":15},{"week":"2026-09-14","critical":2,"exploited":0,"vulnerabilities":14},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-94084","cvss":9.4,"epss":0.0054,"slug":"cve-2026-94084-suricata-before-8-0-7-has-an-http2threadmultibuf-use-after-free","title":"Suricata use-after-free in HTTP/2 response header detection","severity":"critical","exploited":false,"published_at":"2026-09-20T02:16:53.717+00:00","url":"https://junglewise.ai/threats/cve-2026-94084-suricata-before-8-0-7-has-an-http2threadmultibuf-use-after-free"},{"cve":"CVE-2026-94083","cvss":9.4,"epss":0.0054,"slug":"cve-2026-94083-suricata-before-8-0-7-has-a-doh2-type-confusion-that-can-cause-an","title":"Suricata DoH2 type confusion in HTTP state cleanup","severity":"critical","exploited":false,"published_at":"2026-09-20T02:16:53.52+00:00","url":"https://junglewise.ai/threats/cve-2026-94083-suricata-before-8-0-7-has-a-doh2-type-confusion-that-can-cause-an"},{"cve":"CVE-2026-45764","cvss":9.1,"epss":0.0063,"slug":"cve-2026-45764-suricata-http-2-type-confusion-denial-of-service","title":"Suricata HTTP/2 type confusion denial of service","severity":"critical","exploited":false,"published_at":"2026-09-10T22:16:56.25+00:00","url":"https://junglewise.ai/threats/cve-2026-45764-suricata-http-2-type-confusion-denial-of-service"},{"cve":"CVE-2026-57228","cvss":8.2,"epss":0.0057,"slug":"cve-2026-57228-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata out-of-bounds read in MIME quoted-printable decoder","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:01.367+00:00","url":"https://junglewise.ai/threats/cve-2026-57228-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-45769","cvss":7.5,"epss":0.0179,"slug":"cve-2026-45769-suricata-ikev2-parser-unbounded-memory-consumption","title":"Suricata IKEv2 parser unbounded memory consumption","severity":"high","exploited":false,"published_at":"2026-09-10T22:16:56.97+00:00","url":"https://junglewise.ai/threats/cve-2026-45769-suricata-ikev2-parser-unbounded-memory-consumption"},{"cve":"CVE-2026-45759","cvss":7.5,"epss":0.0084,"slug":"cve-2026-45759-suricata-http-content-disposition-denial-of-service","title":"Suricata HTTP Content-Disposition denial of service","severity":"high","exploited":false,"published_at":"2026-09-10T21:17:27.543+00:00","url":"https://junglewise.ai/threats/cve-2026-45759-suricata-http-content-disposition-denial-of-service"},{"cve":"CVE-2026-46387","cvss":7.5,"epss":0.0074,"slug":"cve-2026-46387-suricata-http-2-decompression-denial-of-service","title":"Suricata HTTP/2 decompression denial of service","severity":"high","exploited":false,"published_at":"2026-09-10T15:17:35.267+00:00","url":"https://junglewise.ai/threats/cve-2026-46387-suricata-http-2-decompression-denial-of-service"},{"cve":"CVE-2026-57227","cvss":7.5,"epss":0.007,"slug":"cve-2026-57227-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata MQTT parser resource exhaustion in transaction handling","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:01.217+00:00","url":"https://junglewise.ai/threats/cve-2026-57227-suricata-is-a-network-intrusion-detection-system-intrusion"},{"cve":"CVE-2026-45768","cvss":7.5,"epss":0.007,"slug":"cve-2026-45768-suricata-unbounded-ldap-response-buffering-denial-of-service","title":"Suricata unbounded LDAP response buffering denial of service","severity":"high","exploited":false,"published_at":"2026-09-10T22:16:56.827+00:00","url":"https://junglewise.ai/threats/cve-2026-45768-suricata-unbounded-ldap-response-buffering-denial-of-service"},{"cve":"CVE-2026-63446","cvss":7.5,"epss":0.0068,"slug":"cve-2026-63446-suricata-is-a-network-intrusion-detection-system-intrusion","title":"Suricata inverted flag logic in transaction cleanup","severity":"high","exploited":false,"published_at":"2026-09-18T21:17:03.763+00:00","url":"https://junglewise.ai/threats/cve-2026-63446-suricata-is-a-network-intrusion-detection-system-intrusion"}],"generated_at":"2026-09-26T12:07:00.15149+00:00","technologies":[{"name":"OISF Suricata","slug":"suricata","vulnerabilities":17,"url":"https://junglewise.ai/threats/technologies/suricata"}]}