Known vulnerabilities in OISF suricata
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-94084 | Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use… | 9.4 Critical | Sep 20, 2026 |
| CVE-2026-94083 | Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state… | 9.4 Critical | Sep 20, 2026 |
| CVE-2026-45764 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine | 9.1 Critical | Sep 10, 2026 |