CVE-2026-45768

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, LDAP transaction state could store an unbounded number of responses. Because LDAP can be processed over UDP, crafted traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Version 8.0.5 contains a fix. As a workaround, disable LDAP application-layer parsing where it is not required. Alternatively, use a rule like `alert ldap any any -> any any (sid: 1; ldap.responses.count: >1024; bypass;)`.

• CWE-400
• CWE-770

• https://forum.suricata.io/t/suricata-8-0-5-and-7-0-16-released/6315Release Notes, Vendor Advisory
• https://github.com/OISF/suricata/security/advisories/GHSA-cr4x-w4c4-57p7Third Party Advisory
• https://redmine.openinfosecfoundation.org/issues/8405Permissions Required

Published

Sep 10, 2026

Last Modified

Sep 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45762Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-45763Suricata is a network Intrusion Detection System, Intrusion …5.9
• CVE-2026-45764Suricata is a network Intrusion Detection System, Intrusion …9.1
• CVE-2026-45765Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-45766Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-45767Suricata is a network Intrusion Detection System, Intrusion …4.4
• CVE-2026-45769Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-4577A vulnerability was found in code-projects Exam Form Submiss…2.4
• CVE-2026-45770Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-45771FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2026-45772Turborepo is a high-performance build system for JavaScript …9.8
• CVE-2026-45773Turborepo is a high-performance build system for JavaScript …6.5