{"metadata": {"vulnerability": "cve-2026-94084", "count": 24, "kinds": {"milestone": 5, "sighting": 10, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-20T01:20:20.153Z", "date_only": false, "value": "2026-09-20T01:20:20.153Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-94084", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-20T01:20:20.503Z", "date_only": false, "value": "2026-09-20T01:20:20.503Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-94084", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-20T01:20:20.503Z", "date_only": false, "value": "2026-09-20T01:20:20.503Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2026-94084", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-20T01:52:56.591Z", "date_only": false, "value": "2026-09-20T01:52:56.591808Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117300866329766276", "record": "CVE-2026-94084", "field": "creation_timestamp", "uuid": "63f3d3a7-c8c6-488e-ba5b-ce7587891646", "content": "A new vulnerability with increased severity was disclosed for OISF Suricata (CVE-2026-94084) https://vuldb.com/vuln/407992", "url": "https://infosec.exchange/users/vuldb/statuses/117300866329766276"}, {"timestamp": "2026-09-20T02:16:00Z", "date_only": false, "value": "2026-09-20T02:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-94084", "record": "UBUNTU-CVE-2026-94084", "field": "published"}, {"timestamp": "2026-09-20T02:16:53Z", "date_only": false, "value": "2026-09-20T02:16:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4JPJ-5857-48JP", "record": "GHSA-4JPJ-5857-48JP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-20T02:16:53.717Z", "date_only": false, "value": "2026-09-20T02:16:53.717", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94084", "record": "FKIE_CVE-2026-94084", "field": "published"}, {"timestamp": "2026-09-20T02:30:07.856Z", "date_only": false, "value": "2026-09-20T02:30:07.856647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvw5oqhlbm2j", "record": "CVE-2026-94084", "field": "creation_timestamp", "uuid": "98c0ace8-2747-4de9-bfe6-4b2d12364b45", "content": "CVE-2026-94084 - suricata\nThe Suricata network sensor (versions before 8.0.7) can run into a memory error when it checks HTTP/2 traffic that matches certain response\u2011header rules. This error could cause the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#suricata #oisf #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvw5oqhlbm2j"}, {"timestamp": "2026-09-20T03:00:24.448Z", "date_only": false, "value": "2026-09-20T03:00:24.448281Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117301131585215767", "record": "cve-2026-94084", "field": "creation_timestamp", "uuid": "3796aade-dc3e-4c03-b81f-4d679bdc8e7c", "content": "CRITICAL use-after-free (CVE-2026-94084) in Suricata &lt;8.0.7 \ud83d\udee1\ufe0f. Exploitable via HTTP/2 rules with http.response_header. Risk: code execution, memory corruption. Patch by upgrading to 8.0.7+. https://radar.offseq.com/threat/cve-2026-94084-cwe-416-use-after-free-in-oisf-suricata-f54e858a25f14d6f #OffSeq #Suricata #Vuln #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117301131585215767"}, {"timestamp": "2026-09-20T03:00:26.675Z", "date_only": false, "value": "2026-09-20T03:00:26.675868Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvw7ewloah2b", "record": "cve-2026-94084", "field": "creation_timestamp", "uuid": "8351b05c-f860-4bee-8047-1c108f12eb10", "content": "Suricata &lt;8.0.7 has a CRITICAL use-after-free flaw (CVE-2026-94084, CVSS 9.4). Affected by certain HTTP/2 rules. Upgrade to 8.0.7+ to mitigate risks. https://radar.offseq.com/threat/cve-2026-94084-cwe-416-use-after-free-in-oisf-suricata-f54e858a25f14d6f #OffSeq #Suricata #Vulnerability", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvw7ewloah2b"}, {"timestamp": "2026-09-20T03:02:54.002Z", "date_only": false, "value": "2026-09-20T03:02:54.002774Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7jcku4l2e", "record": "CVE-2026-94084", "field": "creation_timestamp", "uuid": "c6046d87-1919-496f-b40c-0f1fb76e5a6c", "content": "\ud83d\udd34 CVE-2026-94084 - Critical (9.4)\n\nSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected b...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94084/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7jcku4l2e"}, {"timestamp": "2026-09-20T03:30:27Z", "date_only": false, "value": "2026-09-20T03:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4JPJ-5857-48JP", "record": "GHSA-4JPJ-5857-48JP", "field": "published"}, {"timestamp": "2026-09-20T03:30:27Z", "date_only": false, "value": "2026-09-20T03:30:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4JPJ-5857-48JP", "record": "GHSA-4JPJ-5857-48JP", "field": "modified"}, {"timestamp": "2026-09-20T03:52:37.260Z", "date_only": false, "value": "2026-09-20T03:52:37.260038Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cddo43gilroiw", "record": "CVE-2026-94084", "field": "creation_timestamp", "uuid": "aff3862f-f813-4d42-8e58-174c1118fa3f", "content": "CVE-2026-94084 - Suricata Http2ThreadMultiBuf Use-After-Free\nCVE ID : CVE-2026-94084\n \n Published : Sept. 20, 2026, 2:16 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/cddo43gilroiw"}, {"timestamp": "2026-09-20T04:07:17.762Z", "date_only": false, "value": "2026-09-20T04:07:17.762176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvwd4ifmaa2n", "record": "CVE-2026-94084", "field": "creation_timestamp", "uuid": "64953390-05ce-418e-b1d2-2f717e0762d7", "content": "\ud83d\udea8 CVE-2026-94084 \u2014 CVSS 9.4 CRITICAL\n\nSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94084\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvwd4ifmaa2n"}, {"timestamp": "2026-09-20T05:03:08.057Z", "date_only": false, "value": "2026-09-20T05:03:08.057350Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadmxcd2z", "record": "CVE-2026-94084", "field": "creation_timestamp", "uuid": "517df574-67e8-4ad7-844e-9d418dc38e77", "content": "Daily IT Security Digest \u2014 2026-09-20\n# Daily IT Security Digest \u2014 2026-09-20\n\n## Key Security Events\n\n1. **Suricata Critical NIDS Vulnerabilities \u2014 CVE-2026-94084 &amp; CVE-2026-94083**\n   Two critical flaws (CVSS 9.4 each) in Suricata &lt; 8.0.7. CVE-2026-94084 is a use-after-free in the HTTP/2", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadmxcd2z"}, {"timestamp": "2026-09-20T05:03:09.094Z", "date_only": false, "value": "2026-09-20T05:03:09.094089Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgae63zh25", "record": "CVE-2026-94084", "field": "creation_timestamp", "uuid": "194bf4ef-f417-48f4-b4cb-e6d90c756104", "content": "Daily IT Security Digest \u2014 2026-09-20\nSuricata 8.0.7 or later immediately.\n   Sources: https://radar.offseq.com/threat/cve-2026-94084-cwe; https://stemshop.top/cve/CVE-2026-94084; https://stemshop.top/cve/CVE-2026-94083\n\n2. **Microsoft Patches CVSS 10.0 Azure AI Foundry &amp; Critical M365 Flaws**", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgae63zh25"}, {"timestamp": "2026-09-21T13:27:39.510Z", "date_only": false, "value": "2026-09-21T13:27:39.510945Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117309260204172594", "record": "cve-2026-94084", "field": "creation_timestamp", "uuid": "7cfce412-a7a0-4471-995f-e43e09f25a69", "content": "RE: https://infosec.exchange/@suricata/117309241594395404\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94083\nsev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94084\nsev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "url": "https://infosec.exchange/users/cR0w/statuses/117309260204172594"}, {"timestamp": "2026-09-22T18:24:29.351Z", "date_only": false, "value": "2026-09-22T18:24:29.351972Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-94084", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-22T18:24:29.351Z", "date_only": false, "value": "2026-09-22T18:24:29.351972Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94084", "record": "FKIE_CVE-2026-94084", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-22T18:27:33.350Z", "date_only": false, "value": "2026-09-22T18:27:33.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-94084", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-22T18:27:33.350Z", "date_only": false, "value": "2026-09-22T18:27:33.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-94084", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-28T18:29:51.570Z", "date_only": false, "value": "2026-09-28T18:29:51.570", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-94084", "record": "FKIE_CVE-2026-94084", "field": "lastModified"}, {"timestamp": "2026-10-17T09:58:12Z", "date_only": false, "value": "2026-10-17T09:58:12Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-94084", "record": "UBUNTU-CVE-2026-94084", "field": "modified"}]}
