https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:43:09.248101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:13978 ALSA-2026:13978 — Moderate: libsoup security update 2026-10-04T04:43:09.620861+00:00

Affected: AlmaLinux:9: libsoup, AlmaLinux:9: libsoup-devel

The libsoup packages provide an HTTP client and server library for GNOME.

Security Fix(es):

* libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-325747 EUVD-2026-325747 2026-10-04T04:43:09.620930+00:00 EUVD-2026-325747 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5119 fkie_cve-2026-5119 2026-10-04T04:43:09.620948+00:00

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.

 https://cve.radiocsirt.org/vuln/ghsa-j666-j6hj-fpc7 GHSA-j666-j6hj-fpc7 2026-10-04T04:43:09.620971+00:00

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-5119 msrc_CVE-2026-5119 — Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment 2026-10-04T04:43:09.620987+00:00 msrc_CVE-2026-5119 https://cve.radiocsirt.org/vuln/oesa-2026-2026 OESA-2026-2026 — libsoup security update 2026-10-04T04:43:09.621004+00:00

Affected: openEuler:24.03-LTS-SP1: libsoup

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es):

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.(CVE-2026-5119)

 https://cve.radiocsirt.org/vuln/rhsa-2026:13978 RHSA-2026:13978 — Red Hat Security Advisory: libsoup security update 2026-10-04T04:43:09.621026+00:00

libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment

 https://cve.radiocsirt.org/vuln/rhsa-2026:17482 RHSA-2026:17482 — Red Hat Security Advisory: libsoup3 security update 2026-10-04T04:43:09.621042+00:00

libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5119 UBUNTU-CVE-2026-5119 2026-10-04T04:43:09.621058+00:00

Affected: Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:26.04:LTS: libsoup3 and 1 more

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1007 WID-SEC-W-2026-1007 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-04T04:43:09.621092+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.