{"metadata": {"vulnerability": "CVE-2026-94083", "count": 24, "kinds": {"milestone": 5, "sighting": 10, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-20T01:18:05.348Z", "date_only": false, "value": "2026-09-20T01:18:05.348Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-94083", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-20T01:18:05.744Z", "date_only": false, "value": "2026-09-20T01:18:05.744Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-94083", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-20T01:18:05.744Z", "date_only": false, "value": "2026-09-20T01:18:05.744Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-94083", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-20T02:16:00Z", "date_only": false, "value": "2026-09-20T02:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-94083", "record": "UBUNTU-CVE-2026-94083", "field": "published"}, {"timestamp": "2026-09-20T02:16:53Z", "date_only": false, "value": "2026-09-20T02:16:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4WWF-734G-MQM8", "record": "GHSA-4WWF-734G-MQM8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-20T02:16:53.520Z", "date_only": false, "value": "2026-09-20T02:16:53.520", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94083", "record": "FKIE_CVE-2026-94083", "field": "published"}, {"timestamp": "2026-09-20T02:30:05.095Z", "date_only": false, "value": "2026-09-20T02:30:05.095755Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvw5onpjee2b", "record": "CVE-2026-94083", "field": "creation_timestamp", "uuid": "1141f382-a808-40ea-adb0-c579d2b9b095", "content": "CVE-2026-94083 - suricata\nThe Suricata network monitoring tool can stop working if it processes a DNS\u2011over\u2011HTTPS request that tries to switch from HTTP\u202f1 to HTTP\u202f2. This happens because the program frees\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#suricata #oisf #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvw5onpjee2b"}, {"timestamp": "2026-09-20T03:02:46.555Z", "date_only": false, "value": "2026-09-20T03:02:46.555597Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7j33wz622", "record": "CVE-2026-94083", "field": "creation_timestamp", "uuid": "69e935b4-97fc-4708-9d5f-74f7ec1330e2", "content": "\ud83d\udd34 CVE-2026-94083 - Critical (9.4)\n\nSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94083/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7j33wz622"}, {"timestamp": "2026-09-20T03:30:27Z", "date_only": false, "value": "2026-09-20T03:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4WWF-734G-MQM8", "record": "GHSA-4WWF-734G-MQM8", "field": "published"}, {"timestamp": "2026-09-20T03:30:27Z", "date_only": false, "value": "2026-09-20T03:30:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4WWF-734G-MQM8", "record": "GHSA-4WWF-734G-MQM8", "field": "modified"}, {"timestamp": "2026-09-20T03:58:36.696Z", "date_only": false, "value": "2026-09-20T03:58:36.696545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7dqgvj4trw3zs", "record": "CVE-2026-94083", "field": "creation_timestamp", "uuid": "304d5024-805e-4613-b9b1-9a752dbfe50c", "content": "CVE-2026-94083 - Suricata DoH2 Type Confusion Vulnerability\nCVE ID : CVE-2026-94083\n \n Published : Sept. 20, 2026, 2:16 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the H...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/7dqgvj4trw3zs"}, {"timestamp": "2026-09-20T04:07:08.638Z", "date_only": false, "value": "2026-09-20T04:07:08.638478Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvwd47pirb2r", "record": "CVE-2026-94083", "field": "creation_timestamp", "uuid": "1ab5d751-be75-4bce-93ba-ff302da4ddbb", "content": "\ud83d\udea8 CVE-2026-94083 \u2014 CVSS 9.4 CRITICAL\n\nSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94083\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvwd47pirb2r"}, {"timestamp": "2026-09-20T04:30:24.033Z", "date_only": false, "value": "2026-09-20T04:30:24.033503Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117301485443391381", "record": "cve-2026-94083", "field": "creation_timestamp", "uuid": "81063393-4fb5-48b3-a604-964f23bcf025", "content": "Suricata 8.0.0 \u2013 8.0.6 affected by CRITICAL CVE-2026-94083: Type confusion in DoH2 (CWE-843) can trigger DoS via invalid free. Patch to 8.0.7+. No known exploits yet. https://radar.offseq.com/threat/cve-2026-94083-cwe-843-access-of-resource-using-incompatible-type-type-confusion-in-oisf-suricata-a9f0752b258da862 #OffSeq #Suricata #Vuln #BlueTeam", "url": "https://infosec.exchange/users/offseq/statuses/117301485443391381"}, {"timestamp": "2026-09-20T04:30:26.218Z", "date_only": false, "value": "2026-09-20T04:30:26.218065Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvweftudr32q", "record": "cve-2026-94083", "field": "creation_timestamp", "uuid": "1724ce54-f097-4d11-9c4b-16e6ee0a49f7", "content": "CRITICAL vuln in Suricata 8.0.0 \u2013 8.0.6 (CVE-2026-94083): DoH2 type confusion can lead to DoS. Upgrade to 8.0.7+ ASAP \ud83d\udee1\ufe0f. Details: https://radar.offseq.com/threat/cve-2026-94083-cwe-843-access-of-resource-using-incompatible-type-type-confusion-in-oisf-suricata-a9f0752b258da862 #OffSeq #Suricata #...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvweftudr32q"}, {"timestamp": "2026-09-20T05:03:08.100Z", "date_only": false, "value": "2026-09-20T05:03:08.100267Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadmxcd2z", "record": "CVE-2026-94083", "field": "creation_timestamp", "uuid": "70c17df4-2451-419c-a219-9e805b22d4c4", "content": "Daily IT Security Digest \u2014 2026-09-20\n# Daily IT Security Digest \u2014 2026-09-20\n\n## Key Security Events\n\n1. **Suricata Critical NIDS Vulnerabilities \u2014 CVE-2026-94084 & CVE-2026-94083**\n   Two critical flaws (CVSS 9.4 each) in Suricata < 8.0.7. CVE-2026-94084 is a use-after-free in the HTTP/2", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadmxcd2z"}, {"timestamp": "2026-09-20T05:03:08.602Z", "date_only": false, "value": "2026-09-20T05:03:08.602682Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadvu3s2g", "record": "CVE-2026-94083", "field": "creation_timestamp", "uuid": "cfaa85a6-1465-4129-936f-6d6c0d225111", "content": "Daily IT Security Digest \u2014 2026-09-20\n`Http2ThreadMultiBuf` component exploitable via crafted rules using `http.response_header`. CVE-2026-94083 is a DOH2 type confusion causing invalid free through cleanup code. Both allow denial of service and potentially remote code execution. Patch by upgrading", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadvu3s2g"}, {"timestamp": "2026-09-20T05:03:09.142Z", "date_only": false, "value": "2026-09-20T05:03:09.142470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgae63zh25", "record": "CVE-2026-94083", "field": "creation_timestamp", "uuid": "0d6bfbe4-3639-4bb0-8edd-8332701ba9c4", "content": "Daily IT Security Digest \u2014 2026-09-20\nSuricata 8.0.7 or later immediately.\n   Sources: https://radar.offseq.com/threat/cve-2026-94084-cwe; https://stemshop.top/cve/CVE-2026-94084; https://stemshop.top/cve/CVE-2026-94083\n\n2. **Microsoft Patches CVSS 10.0 Azure AI Foundry & Critical M365 Flaws**", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgae63zh25"}, {"timestamp": "2026-09-21T13:27:39.449Z", "date_only": false, "value": "2026-09-21T13:27:39.449630Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117309260204172594", "record": "cve-2026-94083", "field": "creation_timestamp", "uuid": "94d86d97-4b8c-4358-bb4d-02afb8400e4b", "content": "RE: https://infosec.exchange/@suricata/117309241594395404\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94083\nsev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94084\nsev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "url": "https://infosec.exchange/users/cR0w/statuses/117309260204172594"}, {"timestamp": "2026-09-22T15:19:55.907Z", "date_only": false, "value": "2026-09-22T15:19:55.907673Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94083", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-22T15:19:55.907Z", "date_only": false, "value": "2026-09-22T15:19:55.907673Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94083", "record": "FKIE_CVE-2026-94083", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-22T15:20:03.227Z", "date_only": false, "value": "2026-09-22T15:20:03.227Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-94083", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-22T15:20:03.227Z", "date_only": false, "value": "2026-09-22T15:20:03.227Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-94083", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-28T18:30:00.563Z", "date_only": false, "value": "2026-09-28T18:30:00.563", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94083", "record": "FKIE_CVE-2026-94083", "field": "lastModified"}, {"timestamp": "2026-10-17T09:58:12Z", "date_only": false, "value": "2026-10-17T09:58:12Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-94083", "record": "UBUNTU-CVE-2026-94083", "field": "modified"}]}