Vulnerability Details CVE-2026-94084
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 34.2%
CVSS Severity
CVSS v3 Score 9.4