{"vulnerability": "cve-2026-9408", "sightings": [{"uuid": "19f10ac8-2ba8-44b0-b3cf-db9c9c53f8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9408", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116632625460794481", "content": "\u26a0\ufe0f CRITICAL: Totolink A8000RU (7.1cu.643_b20200521) hit by CVE-2026-9408 OS command injection. No patch yet; exploit code is public. Restrict web mgmt access & monitor for updates. https://radar.offseq.com/threat/cve-2026-9408-os-command-injection-in-totolink-a80-6c44853f #OffSeq #CVE20269408 #Infosec #RouterSecurity", "creation_timestamp": "2026-05-25T01:30:31.084550Z"}, {"uuid": "76af3f99-b492-4fd2-afc8-7471aecf30e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9408", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmnddk3og42y", "content": "CRITICAL: Totolink A8000RU (7.1cu.643_b20200521) faces OS command injection (CVE-2026-9408). Exploit code public, no patch. Restrict web access & watch for updates. https://radar.offseq.com/threat/cve-2026-9408-os-command-injection-in-totolink-a80-6c44853f #OffSeq #Vulnerability #RouterSecurity", "creation_timestamp": "2026-05-25T01:30:32.465481Z"}, {"uuid": "1aa5e26c-f8b1-44ec-9984-a67dbd10e1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9408", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motwe6iw4t2v", "content": "\ud83d\udea8  ALERT: CVE-2026-9408\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument enable resu", "creation_timestamp": "2026-06-22T03:17:16.016110Z"}, {"uuid": "63f3d3a7-c8c6-488e-ba5b-ce7587891646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117300866329766276", "content": "A new vulnerability with increased severity was disclosed for OISF Suricata (CVE-2026-94084) https://vuldb.com/vuln/407992", "creation_timestamp": "2026-09-20T01:52:56.591808Z"}, {"uuid": "8351b05c-f860-4bee-8047-1c108f12eb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94084", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvw7ewloah2b", "content": "Suricata <8.0.7 has a CRITICAL use-after-free flaw (CVE-2026-94084, CVSS 9.4). Affected by certain HTTP/2 rules. Upgrade to 8.0.7+ to mitigate risks. https://radar.offseq.com/threat/cve-2026-94084-cwe-416-use-after-free-in-oisf-suricata-f54e858a25f14d6f #OffSeq #Suricata #Vulnerability", "creation_timestamp": "2026-09-20T03:00:26.675868Z"}, {"uuid": "1141f382-a808-40ea-adb0-c579d2b9b095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvw5onpjee2b", "content": "CVE-2026-94083 - suricata\nThe Suricata network monitoring tool can stop working if it processes a DNS\u2011over\u2011HTTPS request that tries to switch from HTTP\u202f1 to HTTP\u202f2. This happens because the program frees\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#suricata #oisf #CVE #infosec", "creation_timestamp": "2026-09-20T02:30:05.095755Z"}, {"uuid": "98c0ace8-2747-4de9-bfe6-4b2d12364b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvw5oqhlbm2j", "content": "CVE-2026-94084 - suricata\nThe Suricata network sensor (versions before 8.0.7) can run into a memory error when it checks HTTP/2 traffic that matches certain response\u2011header rules. This error could cause the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#suricata #oisf #CVE #infosec", "creation_timestamp": "2026-09-20T02:30:07.856647Z"}, {"uuid": "3796aade-dc3e-4c03-b81f-4d679bdc8e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94084", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117301131585215767", "content": "CRITICAL use-after-free (CVE-2026-94084) in Suricata <8.0.7 \ud83d\udee1\ufe0f. Exploitable via HTTP/2 rules with http.response_header. Risk: code execution, memory corruption. Patch by upgrading to 8.0.7+. https://radar.offseq.com/threat/cve-2026-94084-cwe-416-use-after-free-in-oisf-suricata-f54e858a25f14d6f #OffSeq #Suricata #Vuln #Infosec", "creation_timestamp": "2026-09-20T03:00:24.448281Z"}, {"uuid": "69e935b4-97fc-4708-9d5f-74f7ec1330e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7j33wz622", "content": "\ud83d\udd34 CVE-2026-94083 - Critical (9.4)\n\nSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94083/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T03:02:46.555597Z"}, {"uuid": "c6046d87-1919-496f-b40c-0f1fb76e5a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvw7jcku4l2e", "content": "\ud83d\udd34 CVE-2026-94084 - Critical (9.4)\n\nSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected b...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94084/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T03:02:54.002774Z"}, {"uuid": "aff3862f-f813-4d42-8e58-174c1118fa3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cddo43gilroiw", "content": "CVE-2026-94084 - Suricata Http2ThreadMultiBuf Use-After-Free\nCVE ID : CVE-2026-94084\n \n Published : Sept. 20, 2026, 2:16 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that...", "creation_timestamp": "2026-09-20T03:52:37.260038Z"}, {"uuid": "304d5024-805e-4613-b9b1-9a752dbfe50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7dqgvj4trw3zs", "content": "CVE-2026-94083 - Suricata DoH2 Type Confusion Vulnerability\nCVE ID : CVE-2026-94083\n \n Published : Sept. 20, 2026, 2:16 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the H...", "creation_timestamp": "2026-09-20T03:58:36.696545Z"}, {"uuid": "1ab5d751-be75-4bce-93ba-ff302da4ddbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvwd47pirb2r", "content": "\ud83d\udea8 CVE-2026-94083 \u2014 CVSS 9.4 CRITICAL\n\nSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94083\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-20T04:07:08.638478Z"}, {"uuid": "64953390-05ce-418e-b1d2-2f717e0762d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvwd4ifmaa2n", "content": "\ud83d\udea8 CVE-2026-94084 \u2014 CVSS 9.4 CRITICAL\n\nSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94084\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-20T04:07:17.762176Z"}, {"uuid": "81063393-4fb5-48b3-a604-964f23bcf025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94083", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117301485443391381", "content": "Suricata 8.0.0 \u2013 8.0.6 affected by CRITICAL CVE-2026-94083: Type confusion in DoH2 (CWE-843) can trigger DoS via invalid free. Patch to 8.0.7+. No known exploits yet. https://radar.offseq.com/threat/cve-2026-94083-cwe-843-access-of-resource-using-incompatible-type-type-confusion-in-oisf-suricata-a9f0752b258da862 #OffSeq #Suricata #Vuln #BlueTeam", "creation_timestamp": "2026-09-20T04:30:24.033503Z"}, {"uuid": "1724ce54-f097-4d11-9c4b-16e6ee0a49f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94083", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvweftudr32q", "content": "CRITICAL vuln in Suricata 8.0.0 \u2013 8.0.6 (CVE-2026-94083): DoH2 type confusion can lead to DoS. Upgrade to 8.0.7+ ASAP \ud83d\udee1\ufe0f. Details: https://radar.offseq.com/threat/cve-2026-94083-cwe-843-access-of-resource-using-incompatible-type-type-confusion-in-oisf-suricata-a9f0752b258da862 #OffSeq #Suricata #...", "creation_timestamp": "2026-09-20T04:30:26.218065Z"}, {"uuid": "517df574-67e8-4ad7-844e-9d418dc38e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadmxcd2z", "content": "Daily IT Security Digest \u2014 2026-09-20\n# Daily IT Security Digest \u2014 2026-09-20\n\n## Key Security Events\n\n1. **Suricata Critical NIDS Vulnerabilities \u2014 CVE-2026-94084 & CVE-2026-94083**\n   Two critical flaws (CVSS 9.4 each) in Suricata < 8.0.7. CVE-2026-94084 is a use-after-free in the HTTP/2", "creation_timestamp": "2026-09-20T05:03:08.057350Z"}, {"uuid": "70c17df4-2451-419c-a219-9e805b22d4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadmxcd2z", "content": "Daily IT Security Digest \u2014 2026-09-20\n# Daily IT Security Digest \u2014 2026-09-20\n\n## Key Security Events\n\n1. **Suricata Critical NIDS Vulnerabilities \u2014 CVE-2026-94084 & CVE-2026-94083**\n   Two critical flaws (CVSS 9.4 each) in Suricata < 8.0.7. CVE-2026-94084 is a use-after-free in the HTTP/2", "creation_timestamp": "2026-09-20T05:03:08.100267Z"}, {"uuid": "cfaa85a6-1465-4129-936f-6d6c0d225111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgadvu3s2g", "content": "Daily IT Security Digest \u2014 2026-09-20\n`Http2ThreadMultiBuf` component exploitable via crafted rules using `http.response_header`. CVE-2026-94083 is a DOH2 type confusion causing invalid free through cleanup code. Both allow denial of service and potentially remote code execution. Patch by upgrading", "creation_timestamp": "2026-09-20T05:03:08.602682Z"}, {"uuid": "194bf4ef-f417-48f4-b4cb-e6d90c756104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94084", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgae63zh25", "content": "Daily IT Security Digest \u2014 2026-09-20\nSuricata 8.0.7 or later immediately.\n   Sources: https://radar.offseq.com/threat/cve-2026-94084-cwe; https://stemshop.top/cve/CVE-2026-94084; https://stemshop.top/cve/CVE-2026-94083\n\n2. **Microsoft Patches CVSS 10.0 Azure AI Foundry & Critical M365 Flaws**", "creation_timestamp": "2026-09-20T05:03:09.094089Z"}, {"uuid": "0d6bfbe4-3639-4bb0-8edd-8332701ba9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94083", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvwgae63zh25", "content": "Daily IT Security Digest \u2014 2026-09-20\nSuricata 8.0.7 or later immediately.\n   Sources: https://radar.offseq.com/threat/cve-2026-94084-cwe; https://stemshop.top/cve/CVE-2026-94084; https://stemshop.top/cve/CVE-2026-94083\n\n2. **Microsoft Patches CVSS 10.0 Azure AI Foundry & Critical M365 Flaws**", "creation_timestamp": "2026-09-20T05:03:09.142470Z"}, {"uuid": "b73544be-8f0d-4b58-8a47-1fa050ae7d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117302352760461321", "content": "A new vulnerability with increased severity was disclosed for D-Link DIR-868L (CVE-2026-94089) https://vuldb.com/vuln/408017", "creation_timestamp": "2026-09-20T08:10:58.326928Z"}, {"uuid": "599c946b-6a2e-4041-924e-805027b91bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvy5wzcnit2j", "content": "CVE-2026-94089 - dir-868l\nThe DIR-868L router\u2019s login handling script can be tricked into overflowing its memory when a specially crafted username or password is sent. This flaw lets an attacker run their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir868l #dlink #CVE #infosec", "creation_timestamp": "2026-09-20T21:40:04.805027Z"}, {"uuid": "f16b1a8b-9d40-47cf-b61b-1ba11f2a62d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvy76nt3bi2k", "content": "\ud83d\udd34 CVE-2026-94089 - Critical (10)\n\nA vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94089/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T22:02:16.473776Z"}, {"uuid": "52831652-676d-4614-afb5-163bff0da47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://gist.github.com/ichintu/c58741083d468fc238c83dced24e080a", "content": "Here is a concise threat intelligence summary:\n\n**Date:** September 20, 2026  \n**Overview:** Two critical vulnerabilities were disclosed, both with publicly available exploits requiring immediate remediation.\n\n\u2022 **CVE-2026-94089 | D-Link DIR-868L (Firmware 2.01b05) | Severity: 10.0 (CRITICAL)**  \nA stack-based buffer overflow in the authentication CGI handler (`webfa_authentication.cgi`) caused by unsafe `strcpy` usage. Attackers can remotely exploit this via manipulated `id/password` parameters. Public exploits are available.\n\n\u2022 **CVE-2026-88854 | OrdaSoft Joomla Gallery (Joomla < 6.2.7) | Severity: 9.3 (CRITICAL)**  \nAn unauthenticated SQL injection in the search functionality (`showSearchResult`/`Ajax` functions) due to insufficient input sanitization. Allows anonymous attackers to inject `UNION SELECT` statements and extract arbitrary database contents. Publicly exploitable.\n\n**Recommendation:** Apply vendor patches immediately, restrict exposure of affected endpoints, and monitor for exploitation activity given the critical severity and public exploit availability.", "creation_timestamp": "2026-09-21T00:50:31.773238Z"}, {"uuid": "94d86d97-4b8c-4358-bb4d-02afb8400e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94083", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117309260204172594", "content": "RE: https://infosec.exchange/@suricata/117309241594395404\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94083\nsev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94084\nsev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "creation_timestamp": "2026-09-21T13:27:39.449630Z"}, {"uuid": "7cfce412-a7a0-4471-995f-e43e09f25a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94084", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117309260204172594", "content": "RE: https://infosec.exchange/@suricata/117309241594395404\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94083\nsev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94084\nsev:CRIT 9.4 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "creation_timestamp": "2026-09-21T13:27:39.510945Z"}, {"uuid": "6c476740-62be-4335-badc-3c702f1ec083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94089", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117311540198506805", "content": "CVE-2026-94089 - Critical RCE via Stack Buffer Overflow in D-Link DIR-868L. Public exploit available. CVSS 10.0. Isolate unpatched devices immediately. #CVE #DLink #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-94089/", "creation_timestamp": "2026-09-21T23:07:27.546398Z"}]}