CVE-2026-94083: CWE-843 Access of Resource Using Incompatible Type ('Type Confusion') in OISF Suricata
CVE-2026-94083 is a critical type confusion vulnerability in Suricata versions 8.0.0 through before 8.0.7. It occurs when the DoH2 protocol is enabled (default in 8.x), causing cleanup code for HTTP2 state to run incorrectly on HTTP1 state during a DoH2 request with an HTTP1 to HTTP2 upgrade. This leads to an invalid free and potential denial of service.
AI Analysis
Technical Summary
Suricata before version 8.0.7 contains a type confusion vulnerability related to the handling of DNS over HTTPS version 2 (DoH2) protocol states. When app-layer.protocols.doh2 is enabled, the software may incorrectly execute HTTP2 cleanup code on an HTTP1 state during a DoH2 request involving an HTTP1 to HTTP2 upgrade. This mismatch causes an invalid free operation, which can lead to memory corruption and denial of service conditions. The vulnerability is tracked as CWE-843 (Access of Resource Using Incompatible Type).
Potential Impact
An attacker can trigger a denial of service by exploiting the type confusion vulnerability, causing Suricata to perform an invalid free operation. This can crash the application or destabilize its operation. The CVSS score of 9.4 indicates high impact on confidentiality, integrity, and availability, but no known exploits are reported in the wild.
Mitigation Recommendations
Upgrade Suricata to version 8.0.7 or later, where this vulnerability is fixed. The affected versions are >=8.0.0 and <8.0.7. Since this is a software vulnerability with an official fix available, applying the update is the recommended remediation.
CVE-2026-94083: CWE-843 Access of Resource Using Incompatible Type ('Type Confusion') in OISF Suricata
Description
CVE-2026-94083 is a critical type confusion vulnerability in Suricata versions 8.0.0 through before 8.0.7. It occurs when the DoH2 protocol is enabled (default in 8.x), causing cleanup code for HTTP2 state to run incorrectly on HTTP1 state during a DoH2 request with an HTTP1 to HTTP2 upgrade. This leads to an invalid free and potential denial of service.
CVSS v3.1
Score 9.4critical
Affected software
OISF
Suricata
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Suricata before version 8.0.7 contains a type confusion vulnerability related to the handling of DNS over HTTPS version 2 (DoH2) protocol states. When app-layer.protocols.doh2 is enabled, the software may incorrectly execute HTTP2 cleanup code on an HTTP1 state during a DoH2 request involving an HTTP1 to HTTP2 upgrade. This mismatch causes an invalid free operation, which can lead to memory corruption and denial of service conditions. The vulnerability is tracked as CWE-843 (Access of Resource Using Incompatible Type).
Potential Impact
An attacker can trigger a denial of service by exploiting the type confusion vulnerability, causing Suricata to perform an invalid free operation. This can crash the application or destabilize its operation. The CVSS score of 9.4 indicates high impact on confidentiality, integrity, and availability, but no known exploits are reported in the wild.
Mitigation Recommendations
Upgrade Suricata to version 8.0.7 or later, where this vulnerability is fixed. The affected versions are >=8.0.0 and <8.0.7. Since this is a software vulnerability with an official fix available, applying the update is the recommended remediation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-09-20T01:18:05.348Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aaf379b55bf5e2cf55c7be6
Added to database: 09/20/2026, 01:32:11 UTC
Last enriched: 09/20/2026, 01:46:35 UTC
Last updated: 09/20/2026, 04:31:26 UTC
Views: 21
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.