CVE-2026-45765
📛 CVE Title
(no title)
Description
The vulnerability exists due to a logical validation bypass in the protocol parser engine, enabling a remote attacker to induce a persistent Denial of Service (DoS) state.
Description (MITRE) cveawg.mitre.org
Pulled from cveawg.mitre.org/api/cve/CVE-2026-45765 on 2026-10-24. Shown when MITRE's text differs from the cvelistV5 mirror.
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could buffer data without sufficient parser-level bounds. Crafted DNP3 traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable DNP3 (which is not enabled by default) if it is not needed, and/or define a limited `stream.reassembly.depth` (0 or absent is unlimited).
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- high
- CVSS score
- 7.5 / 10
- CVSS vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H- Effective score
- 7.5 / 10 HIGH source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- —
- Last updated
- —
- Source
- https://www.tenable.com/cve/CVE-2026-45765
- Linked Threat
- CVE-2026-45765 — CVE-2026-45765
NVD / KEV / EPSS data refreshed 2026-08-01 16:29 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-75762 - Assigner
- GitHub_M
- Published
- Sep 10, 2026, 9:25:22 PM
- Updated
- Sep 10, 2026, 9:25:22 PM
- EUVD base score (CVSS 3.1)
-
7.5 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EUVD-reported EPSS
- 0.0000
- Vendors
- OISF
- Products
-
suricata (< 7.0.16)suricata (8.0.0, < 8.0.5)
ENISA description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could buffer data without sufficient parser-level bounds. Crafted DNP3 traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable DNP3 (which is not enabled by default) if it is not needed, and/or define a limited `stream.reassembly.depth` (0 or absent is unlimited).
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
MITRE references (3) cveawg.mitre.org
Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.
- https://forum.suricata.io/t/suricata-8-0-5-and-7-0-16-released/6315 x_refsource_MISC
- https://github.com/OISF/suricata/security/advisories/GHSA-m8x4-c78g-r4vj x_refsource_CONFIRM
- https://redmine.openinfosecfoundation.org/issues/8460 x_refsource_MISC
Web references (2)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvd.nist.gov/vuln/detail/CVE-2026-45765 tenable:nvd.nist.gov
- https://www.cve.org/CVERecord?id=CVE-2026-45765 tenable:www.cve.org
Remediations (10)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:cybersecuritynews.com
Microsoft's May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote code execution (RCE) flaws rated Critical.
2026-06-19 02:33 UTC -
web:cybersecuritynews.com
No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.
2026-06-19 02:33 UTC -
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.
2026-06-19 02:33 UTC -
web:support.microsoft.com
Improvements This update includes new features and quality improvements that were part of the following update: May 12, 2026—KB5089549 (OS Builds 26200.8457 and 26100.8457) May 26, 2026—KB5089573 (OS Builds 26200.8524 and 26100.8524) This update addresses security vulnerabilities documented in the following guide: June 2026 Security Updates. The following summary outlines key quality ...
2026-06-19 02:33 UTC -
web:thehackernews.com
Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public disclosure last week. The zero-day flaw, now tracked as CVE - 2026 -45585, carries a CVSS score of 6.8.
2026-06-19 02:33 UTC -
web:windowsforum.com
The Patch Window Is the Real Security Boundary The practical lessons from CVE - 2026 -45657 are not mysterious, but they are concrete enough to separate disciplined shops from hopeful ones. This is not a vulnerability that rewards theatrical mitigation plans. It rewards boring execution: update, reboot, verify, segment, monitor.
2026-06-19 02:33 UTC -
web:www.computerworld.com
Microsoft says it is considering a patch for a zero-day vulnerability, dubbed YellowKey, that allows attackers with access to a Windows device to bypass Bitlocker encryption protection and read ...
2026-06-19 02:33 UTC -
web:www.forbes.com
Following the release of a BitLocker zero-day security bypass by a disgruntled hacker, Microsoft has now offered mitigation advice until a patch is available.
2026-06-19 02:33 UTC -
web:www.windowscentral.com
Microsoft Windows Windows 11 "This update broke BitLocker for me" — Windows 11's April patch is locking out PCs, but here's the fix that works How Tos By Mauro Huculak published April 20 ...
2026-06-19 02:33 UTC -
web:zecurit.com
Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .
2026-06-19 02:33 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.