https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:21:24 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:13978 <p><strong>Affected:</strong> AlmaLinux:9: libsoup, AlmaLinux:9: libsoup-devel</p> <p>The libsoup packages provide an HTTP client and server library for GNOME.</p> <p>Security Fix(es):</p> <p>* libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: libsoup, AlmaLinux:9: libsoup-devel</p> <p>The libsoup packages provide an HTTP client and server library for GNOME.</p> <p>Security Fix(es):</p> <p>* libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment (CVE-2026-5119)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:13978 https://cve.radiocsirt.org/vuln/euvd-2026-325747 EUVD-2026-325747 https://cve.radiocsirt.org/vuln/euvd-2026-325747 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5119 <p>A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.</p> <p>A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5119 https://cve.radiocsirt.org/vuln/ghsa-j666-j6hj-fpc7 <p>A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.</p> <p>A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.</p> https://cve.radiocsirt.org/vuln/ghsa-j666-j6hj-fpc7 https://cve.radiocsirt.org/vuln/msrc_cve-2026-5119 msrc_CVE-2026-5119 https://cve.radiocsirt.org/vuln/msrc_cve-2026-5119 https://cve.radiocsirt.org/vuln/oesa-2026-2026 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libsoup</p> <p>libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es):</p> <p>A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.(CVE-2026-5119)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libsoup</p> <p>libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es):</p> <p>A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.(CVE-2026-5119)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2026 https://cve.radiocsirt.org/vuln/rhsa-2026:13978 <p>libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment</p> <p>libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment</p> https://cve.radiocsirt.org/vuln/rhsa-2026:13978 https://cve.radiocsirt.org/vuln/rhsa-2026:17482 <p>libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment</p> <p>libsoup: libsoup: Denial of Service via Use-After-Free in HTTP/2 server libsoup: libsoup: Information disclosure via cleartext transmission of cookies during HTTPS tunnel establishment</p> https://cve.radiocsirt.org/vuln/rhsa-2026:17482 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5119 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:26.04:LTS: libsoup3 and 1 more</p> <p>A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libsoup2.4, Ubuntu:Pro:18.04:LTS: libsoup2.4, Ubuntu:Pro:20.04:LTS: libsoup2.4, Ubuntu:22.04:LTS: libsoup2.4, Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup2.4, Ubuntu:24.04:LTS: libsoup3, Ubuntu:25.10: libsoup2.4, Ubuntu:25.10: libsoup3, Ubuntu:26.04:LTS: libsoup3 and 1 more</p> <p>A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5119 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1007 <p>Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1007