{"vulnerability": "CVE-2026-94084", "sightings": [{"uuid": "63f3d3a7-c8c6-488e-ba5b-ce7587891646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117300866329766276", "content": "A new vulnerability with increased severity was disclosed for OISF Suricata (CVE-2026-94084) https://vuldb.com/vuln/407992", "creation_timestamp": "2026-09-20T01:52:56.591808Z"}, {"uuid": "8351b05c-f860-4bee-8047-1c108f12eb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94084", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvw7ewloah2b", "content": "Suricata <8.0.7 has a CRITICAL use-after-free flaw (CVE-2026-94084, CVSS 9.4). Affected by certain HTTP/2 rules. Upgrade to 8.0.7+ to mitigate risks. https://radar.offseq.com/threat/cve-2026-94084-cwe-416-use-after-free-in-oisf-suricata-f54e858a25f14d6f #OffSeq #Suricata #Vulnerability", "creation_timestamp": "2026-09-20T03:00:26.675868Z"}, {"uuid": "98c0ace8-2747-4de9-bfe6-4b2d12364b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvw5oqhlbm2j", "content": "CVE-2026-94084 - suricata\nThe Suricata network sensor (versions before 8.0.7) can run into a memory error when it checks HTTP/2 traffic that matches certain response\u2011header rules. This error could cause the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#suricata #oisf #CVE #infosec", "creation_timestamp": "2026-09-20T02:30:07.856647Z"}, {"uuid": "3796aade-dc3e-4c03-b81f-4d679bdc8e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94084", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117301131585215767", "content": "CRITICAL use-after-free (CVE-2026-94084) in Suricata <8.0.7 \ud83d\udee1\ufe0f. Exploitable via HTTP/2 rules with http.response_header. Risk: code execution, memory corruption. Patch by upgrading to 8.0.7+. https://radar.offseq.com/threat/cve-2026-94084-cwe-416-use-after-free-in-oisf-suricata-f54e858a25f14d6f #OffSeq #Suricata #Vuln #Infosec", "creation_timestamp": "2026-09-20T03:00:24.448281Z"}, {"uuid": "c6046d87-1919-496f-b40c-0f1fb76e5a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7jcku4l2e", "content": "\ud83d\udd34 CVE-2026-94084 - Critical (9.4)\n\nSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected b...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94084/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T03:02:54.002774Z"}, {"uuid": "aff3862f-f813-4d42-8e58-174c1118fa3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cddo43gilroiw", "content": "CVE-2026-94084 - Suricata Http2ThreadMultiBuf Use-After-Free\nCVE ID : CVE-2026-94084\n \n Published : Sept. 20, 2026, 2:16 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that...", "creation_timestamp": "2026-09-20T03:52:37.260038Z"}, {"uuid": "64953390-05ce-418e-b1d2-2f717e0762d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvwd4ifmaa2n", "content": "\ud83d\udea8 CVE-2026-94084 \u2014 CVSS 9.4 CRITICAL\n\nSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94084\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-20T04:07:17.762176Z"}, {"uuid": "517df574-67e8-4ad7-844e-9d418dc38e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadmxcd2z", "content": "Daily IT Security Digest \u2014 2026-09-20\n# Daily IT Security Digest \u2014 2026-09-20\n\n## Key Security Events\n\n1. **Suricata Critical NIDS Vulnerabilities \u2014 CVE-2026-94084 & CVE-2026-94083**\n   Two critical flaws (CVSS 9.4 each) in Suricata < 8.0.7. CVE-2026-94084 is a use-after-free in the HTTP/2", "creation_timestamp": "2026-09-20T05:03:08.057350Z"}, {"uuid": "194bf4ef-f417-48f4-b4cb-e6d90c756104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgae63zh25", "content": "Daily IT Security Digest \u2014 2026-09-20\nSuricata 8.0.7 or later immediately.\n   Sources: https://radar.offseq.com/threat/cve-2026-94084-cwe; https://stemshop.top/cve/CVE-2026-94084; https://stemshop.top/cve/CVE-2026-94083\n\n2. **Microsoft Patches CVSS 10.0 Azure AI Foundry & Critical M365 Flaws**", "creation_timestamp": "2026-09-20T05:03:09.094089Z"}]}