CVE-2026-57222

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, crafted IPv4 and IPv6 address pairs can collide in the IPPair hash because src/ippair.c did not compare the IP address family before reusing IPPair-backed state. This can apply state from one IP family to another for xbits track ip_pair, FTP data expectations, and, on the 7.0 release line, thresholding, detection_filter, and rate_filter rules using track by_both, causing incorrect detection state. This issue is fixed in versions 8.0.6 and 7.0.17.

• CWE-697

• https://github.com/OISF/suricata/commit/4a728464e6eb9e273bb02e3df0c28929b28db71d
• https://github.com/OISF/suricata/commit/9d788575c5d22a34eeed50d56557ed12b05e0aec
• https://github.com/OISF/suricata/commit/c92e270c4a795c52bce610aa1ce9ebaf065c49e6
• https://github.com/OISF/suricata/releases/tag/suricata-7.0.17
• https://github.com/OISF/suricata/releases/tag/suricata-8.0.6
• https://github.com/OISF/suricata/security/advisories/GHSA-2r8x-23fw-hgcg
• https://redmine.openinfosecfoundation.org/issues/8559

Published

Sep 18, 2026

Last Modified

Sep 23, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57217RabbitMQ is a messaging and streaming broker. Prior to 3.13.…6.5
• CVE-2026-57218RabbitMQ is a messaging and streaming broker. Prior to 4.2.6…6.5
• CVE-2026-57219RabbitMQ is a messaging and streaming broker. Prior to 3.13.…7.5
• CVE-2026-5722The MoreConvert Pro plugin for WordPress is vulnerable to Au…9.8
• CVE-2026-57220RabbitMQ is a messaging and streaming broker. Prior to 4.2.6…7.5
• CVE-2026-57221RabbitMQ is a messaging and streaming broker. Prior to 3.13.…5
• CVE-2026-57223Suricata is a network Intrusion Detection System, Intrusion …7
• CVE-2026-57224Suricata is a network Intrusion Detection System, Intrusion …6.5
• CVE-2026-57225Suricata is a network Intrusion Detection System, Intrusion …3.3
• CVE-2026-57226Suricata is a network Intrusion Detection System, Intrusion …3.7
• CVE-2026-57227Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-57228Suricata is a network Intrusion Detection System, Intrusion …8.2