CVE-2026-57229CWE-665

CVE-2026-57229

Medium · published September 19, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SMTP MIME parser in rust/src/mime/smtp.rs does not fully reset state when processing Content-Type: message/rfc822 encapsulation. An outer MIME part's encoding or filename state can leak into the inner message, allowing crafted mail to evade detections based on file.data, file.name, or extracted URLs when SMTP MIME decoding is enabled. This issue is fixed in version 8.0.6.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Weakness
CWE-665 · Improper Initialization
Published
2026-09-19T01:17Z
Affected products (1)
ProductVersionsFixed in
oisf/suricata≥ 8.0.0, < 8.0.68.0.6
References (5)
EPSS history
Timeline
  • 20 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 18 SEP 20:18Z
    Suricata smtp/mime: incomplete state reset allows detection bypass
    cvelistv5