Vulnerability - CVE-2026-94084

›

›vulnerability›CVE-2026-94084

Name

CVE-2026-94084

Source

NVD ( link)Debian ( link)

Description

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

CWEs

Published Date

Sep 20, 2026

Updated Date

Sep 28, 2026

Workaround

-

Advisories

https://forum.suricata.io/t/suricata-8-0-7-released/6467Release Notes

https://github.com/OISF/suricata/commit/1d66355dc8737bb2ae7a198115b3067e3ad49808Patch

https://github.com/OISF/suricata/compare/suricata-8.0.6...suricata-8.0.7Release Notes

Analysis#

Affected Component

Analysis

Vulnerability Ratings#

9.4

CVSSv31

NaN

other

Others affected component#

Name

Project

Project Version

Version

Status

buildroot

master

8.0.7

Not Affected