{"vulnerability": "CVE-2026-94083", "sightings": [{"uuid": "1141f382-a808-40ea-adb0-c579d2b9b095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvw5onpjee2b", "content": "CVE-2026-94083 - suricata\nThe Suricata network monitoring tool can stop working if it processes a DNS\u2011over\u2011HTTPS request that tries to switch from HTTP\u202f1 to HTTP\u202f2. This happens because the program frees\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#suricata #oisf #CVE #infosec", "creation_timestamp": "2026-09-20T02:30:05.095755Z"}, {"uuid": "69e935b4-97fc-4708-9d5f-74f7ec1330e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7j33wz622", "content": "\ud83d\udd34 CVE-2026-94083 - Critical (9.4)\n\nSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94083/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T03:02:46.555597Z"}, {"uuid": "304d5024-805e-4613-b9b1-9a752dbfe50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7dqgvj4trw3zs", "content": "CVE-2026-94083 - Suricata DoH2 Type Confusion Vulnerability\nCVE ID : CVE-2026-94083\n \n Published : Sept. 20, 2026, 2:16 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the H...", "creation_timestamp": "2026-09-20T03:58:36.696545Z"}, {"uuid": "1ab5d751-be75-4bce-93ba-ff302da4ddbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvwd47pirb2r", "content": "\ud83d\udea8 CVE-2026-94083 \u2014 CVSS 9.4 CRITICAL\n\nSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94083\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-20T04:07:08.638478Z"}, {"uuid": "81063393-4fb5-48b3-a604-964f23bcf025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94083", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117301485443391381", "content": "Suricata 8.0.0 \u2013 8.0.6 affected by CRITICAL CVE-2026-94083: Type confusion in DoH2 (CWE-843) can trigger DoS via invalid free. Patch to 8.0.7+. No known exploits yet. https://radar.offseq.com/threat/cve-2026-94083-cwe-843-access-of-resource-using-incompatible-type-type-confusion-in-oisf-suricata-a9f0752b258da862 #OffSeq #Suricata #Vuln #BlueTeam", "creation_timestamp": "2026-09-20T04:30:24.033503Z"}, {"uuid": "1724ce54-f097-4d11-9c4b-16e6ee0a49f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94083", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvweftudr32q", "content": "CRITICAL vuln in Suricata 8.0.0 \u2013 8.0.6 (CVE-2026-94083): DoH2 type confusion can lead to DoS. Upgrade to 8.0.7+ ASAP \ud83d\udee1\ufe0f. Details: https://radar.offseq.com/threat/cve-2026-94083-cwe-843-access-of-resource-using-incompatible-type-type-confusion-in-oisf-suricata-a9f0752b258da862 #OffSeq #Suricata #...", "creation_timestamp": "2026-09-20T04:30:26.218065Z"}, {"uuid": "70c17df4-2451-419c-a219-9e805b22d4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadmxcd2z", "content": "Daily IT Security Digest \u2014 2026-09-20\n# Daily IT Security Digest \u2014 2026-09-20\n\n## Key Security Events\n\n1. **Suricata Critical NIDS Vulnerabilities \u2014 CVE-2026-94084 & CVE-2026-94083**\n   Two critical flaws (CVSS 9.4 each) in Suricata < 8.0.7. CVE-2026-94084 is a use-after-free in the HTTP/2", "creation_timestamp": "2026-09-20T05:03:08.100267Z"}, {"uuid": "cfaa85a6-1465-4129-936f-6d6c0d225111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadvu3s2g", "content": "Daily IT Security Digest \u2014 2026-09-20\n`Http2ThreadMultiBuf` component exploitable via crafted rules using `http.response_header`. CVE-2026-94083 is a DOH2 type confusion causing invalid free through cleanup code. Both allow denial of service and potentially remote code execution. Patch by upgrading", "creation_timestamp": "2026-09-20T05:03:08.602682Z"}, {"uuid": "0d6bfbe4-3639-4bb0-8edd-8332701ba9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgae63zh25", "content": "Daily IT Security Digest \u2014 2026-09-20\nSuricata 8.0.7 or later immediately.\n   Sources: https://radar.offseq.com/threat/cve-2026-94084-cwe; https://stemshop.top/cve/CVE-2026-94084; https://stemshop.top/cve/CVE-2026-94083\n\n2. **Microsoft Patches CVSS 10.0 Azure AI Foundry & Critical M365 Flaws**", "creation_timestamp": "2026-09-20T05:03:09.142470Z"}]}