CVE Watch10 sept 2026

CVE-2026-45747

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.1

CVSS

7.5

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 10 sept 2026 · Última mod.: 10 sept 2026 · CWE-476

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic where some certificate fields were absent. Crafted TLS traffic processed by a deployment using affected Lua TLS scripting could crash Suricata, resulting in denial of service. Version 7.0.16 contains a fix. As a workaround, avoid Lua scripts that call TLS certificate information helpers on untrusted traffic (`TlsGetCertInfo` function), or update scripts to handle missing certificate fields where possible.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-781307.5 ALT

—

———strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.6h CVE-2026-781265.9 MED

—

———strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.6h CVE-2026-865476.2 MED

—

——0mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application and cause denial of service.12h CVE-2026-663036.5 MED

54.1%

——16Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.2d CVE-2026-779018.8 ALT

46.4%

——14Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.2d CVE-2026-774897.8 ALT

24.5%

——7Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.3d