Use-After-Free Vulnerability in Suricata by Open Information Security Foundation

CVE-2026-94084

What is CVE-2026-94084?

Suricata versions prior to 8.0.7 are susceptible to a use-after-free vulnerability that occurs when inspecting HTTP transactions. This vulnerability arises specifically when rules that utilize 'http.response_header' are applied, both with and without a transformation. When triggered, this flaw may lead to unexpected behavior or potential exploitation within network traffic analysis.

References