[vulnfeed] 2 critical CVEs — 2026-09-20 04:00 UTC
vulnfeed
Critical alert — 2026-09-20 05:14 UTC
2 new critical CVEs
in the last 5 hours — 2 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-94083CRITICAL
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the H
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when there is a DoH2 request
CVSS 9.4
CVE-2026-94084CRITICAL
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.
CVSS 9.4
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: