en
OISF, the Open Information Security Foundation, is a nonprofit organization focused on open source cybersecurity. It builds community and provides organizational and technical support for security projects, including Suricata, a network threat detection engine. OISF operates through an international open source community of developers, users, and security organizations.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/17/2026, OISF recorded 35 security vulnerabilities in the last 90 days across 1 products, including 20 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, suricata had the most security vulnerabilities in the OISF ecosystem, with 35 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CVE-2026-94084CVE-2026-94084CVE-2026-94083CVE-2026-94083CVE-2026-71855Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow stateCVE-2026-71418Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumptionCVE-2026-57223Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation108 Results | Page 1 of 11
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityLow |