CVE-2026-94084
CRITICAL
NVD
CVSS Score
9.4
Severity
CRITICAL
Published
Sep 20, 2026
Vendor
unknown
Description
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.