CVE-2026-57223

Suricata (OISF network IDS/IPS engine) prior to 7.0.17 and 8.0.6 contains a local privilege escalation vulnerability in its Windows service installation logic (src/win32-service.c). The service ImagePath is passed unquoted to CreateServiceA; if Suricata is installed under a path containing spaces...