https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:06:35.198041+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12549 CVE-2026-12549 — Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver 2026-10-07T04:06:35.215757+00:00

Affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request with a suffix length exceeding the content size, the resulting negative start value is not properly clamped, leading to malformed HTTP 206 responses and log flooding.