CVE-2026-45752

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after it had been reallocated and freed. The issue is reached during network traffic processing, but requires a malicious rule as Suricata will crash whatever the traffic. Version 8.0.5 contains a fix. As a workaround, avoid rules that chain `gunzip` or `zlib_deflate` with `max-size` bigger than 4096 after another transform.

• CWE-416

• https://forum.suricata.io/t/suricata-8-0-5-and-7-0-16-released/6315Release Notes, Vendor Advisory
• https://github.com/OISF/suricata/security/advisories/GHSA-qmc9-vqq2-8mv3Mitigation, Vendor Advisory
• https://redmine.openinfosecfoundation.org/issues/8536Permissions Required

Published

Sep 10, 2026

Last Modified

Sep 28, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45747Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-45748Termix is a web-based server management platform with SSH te…9.8
• CVE-2026-45749Termix is a web-based server management platform with SSH te…8.1
• CVE-2026-4575A flaw has been found in code-projects Exam Form Submission …2.4
• CVE-2026-45750Termix is a web-based server management platform with SSH te…9
• CVE-2026-45751Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-45753Symfony is a PHP framework for web and console applications …6.1
• CVE-2026-45754Symfony is a PHP framework for web and console applications …5.3
• CVE-2026-45755Symfony is a PHP framework for web and console applications …5.3
• CVE-2026-45756Symfony is a PHP framework for web and console applications …7.5
• CVE-2026-45757Rocket.Chat is an open-source, secure, fully customizable co…2.3
• CVE-2026-45758Guardrails AI is a Python framework that helps build AI appl…9.6