← Database

CVE-2026-94084

CRITICAL CVSS: 9.4 Published: 2026-09-20 Modified: 2026-09-20

Description

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

Affected Platforms

Unknown

Weakness Type

CWE-416

References