{"uuid": "dc026c4f-1a9a-49f2-90c3-4b2927b56231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63446", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117329638373190044", "content": "CVE-2026-63446 Suricata 8.0.0-8.0.6: inverted guard in AppLayerParserSetTransactionInspectId() skips detection on pass-rule flows. Unfreed transactions rescan endlessly, risking memory exhaustion/DoS. CVSS 7.5, unpatched. Update https://www.valtersit.com/cve/CVE-2026-63446/ #CVE #infosec #Suricata", "creation_timestamp": "2026-09-25T03:50:08.041536Z"}