CriticalSecurity & Privacy

CVE-2026-94084: Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.r... (CVSS 9.4)

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

#Zero Trust #Vulnerability Disclosure #Security Incident #Network Security #Critical CVE

VulnersSeptember 20, 20261 min read

Read full article

CVE-2026-94084: Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.r... (CVSS 9.4)

Read the full story at Vulners →