CVE-2026-57229

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SMTP MIME parser in rust/src/mime/smtp.rs does not fully reset state when processing Content-Type: message/rfc822 encapsulation. An outer MIME part's encoding or filename state can leak into the inner message, allowing crafted mail to evade detections based on file.data, file.name, or extracted URLs when SMTP MIME decoding is enabled. This issue is fixed in version 8.0.6.

• CWE-665

• https://github.com/OISF/suricata/commit/4985eb9daea2f765b6ef59a58fa02e5c71c0a77cPatch
• https://github.com/OISF/suricata/commit/c0215c7e175b0000ef8450928dd1f3453c48379bPatch
• https://github.com/OISF/suricata/releases/tag/suricata-8.0.6Release Notes
• https://github.com/OISF/suricata/security/advisories/GHSA-ph5p-pm8r-m355Vendor Advisory
• https://redmine.openinfosecfoundation.org/issues/8649Permissions Required

Published

Sep 18, 2026

Last Modified

Sep 28, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57223Suricata is a network Intrusion Detection System, Intrusion …7
• CVE-2026-57224Suricata is a network Intrusion Detection System, Intrusion …6.5
• CVE-2026-57225Suricata is a network Intrusion Detection System, Intrusion …5.5
• CVE-2026-57226Suricata is a network Intrusion Detection System, Intrusion …5.9
• CVE-2026-57227Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-57228Suricata is a network Intrusion Detection System, Intrusion …9.1
• CVE-2026-5723Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-57230OpenReplay is a self-hosted session replay suite. Prior to 1…5.4
• CVE-2026-57231Podman is a tool for managing OCI containers and pods. From …7.5
• CVE-2026-57232Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and…3.1
• CVE-2026-57233Notepad++ is a free and open-source source code editor. Prio…8.1
• CVE-2026-57234Nokogiri is an open source XML and HTML library for the Ruby…2.6