Every CVE Search/ Get API key

CVE-2026-103399

Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body

5.3 MediumFix available

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.25%Down 0.2 points since Oct 1, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.

Record
CVE-2026-103399
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-444
Updated
2026-11-05
EUVDEUVD-2026-90226 5.3

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.

Record
EUVD-2026-90226
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-05
GitHub AdvisoriesGHSA-mfgq-q7gx-p678 5.3

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect:...

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.

Record
GHSA-mfgq-q7gx-p678
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-444
Updated
2026-11-02
NVD 5.3

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.

Record
CVE-2026-103399
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-444
Updated
2026-11-05
OSVDEBIAN-CVE-2026-103399 5.3

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.

Record
DEBIAN-CVE-2026-103399
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-103399 5.3

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.

Record
UBUNTU-CVE-2026-103399
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-04
Show 11 moreShow less
OSVAZL-105543 No score

CVE-2026-103399 affecting package libsoup 3.4.4-18

A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.

Record
AZL-105543
Updated
2026-11-05
OSVopenSUSE-SU-2026:12132-1 No score

libsoup-2_4-1-2.74.3-25.1 on GA media

These are all security issues fixed in the libsoup-2_4-1-2.74.3-25.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12132-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22181-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
openSUSE-SU-2026:22181-1
Updated
2026-11-02
OSVSUSE-SU-2026:24368-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:24368-1
Updated
2026-11-02
OSVSUSE-SU-2026:24470-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:24470-1
Updated
2026-11-04
OSVSUSE-SU-2026:4690-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401).
  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4690-1
Updated
2026-11-02
OSVSUSE-SU-2026:4703-1 No score

Security update for libsoup2

This update for libsoup2 fixes the following issues:

  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988).
  • CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4703-1
Updated
2026-11-02
OSVSUSE-SU-2026:4739-1 No score

Security update for libsoup2

This update for libsoup2 fixes the following issues:

  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988).
  • CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4739-1
Updated
2026-11-02
OSVSUSE-SU-2026:5062-1 No score

Security update for libsoup

This update for libsoup fixes the following issue:

  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:5062-1
Updated
2026-11-03
OSVSUSE-SU-2026:5063-1 No score

Security update for libsoup

This update for libsoup fixes the following issue:

  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:5063-1
Updated
2026-11-03
OSVUSN-8975-1 No score

libsoup2.4, libsoup3 vulnerabilities

It was discovered that libsoup incorrectly handled certain WebSocket frames. A remote attacker could possibly use this issue to cause an application to crash or expose sensitive information. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-12478)

It was discovered that libsoup incorrectly handled certain data URIs. A remote attacker could possibly use this issue to cause an application to crash or expose sensitive information. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-102555)

It was discovered that libsoup incorrectly handled certain WebSocket messages. A remote attacker could possibly use this issue to cause an application to crash. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-102556)

It was discovered that libsoup incorrectly handled fragmented WebSocket messages. A remote attacker could possibly use this issue to cause an application to crash. (CVE-2026-102557)

It was discovered that libsoup incorrectly handled certain WebSocket frames. A remote attacker could possibly use this issue to cause an application to crash. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-102558)

It was discovered that libsoup incorrectly handled large WebSocket messages. An attacker could possibly use this issue to cause an application to crash. (CVE-2026-102559)

It was discovered that libsoup incorrectly handled compressed WebSocket messages. An attacker could possibly use this issue to cause an application to crash. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-102560)

It was discovered that libsoup did not properly handle certain HTTP requests. A remote attacker could possibly use this issue to inject arbitrary HTTP requests. (CVE-2026-103399)

It was discovered that libsoup incorrectly handled proxy credentials. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-12547)

It was discovered that libsoup incorrectly handled multipart messages. A remote attacker could possibly use this issue to cause an application to crash or obtain sensitive information. (CVE-2026-12548)

Record
USN-8975-1
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libsoup
Azure Linux:3
 through 3.4.4-18 None known
libsoup2.4
Debian:12
 All versions, plus listed versions
2.74.3-12.74.3-1+deb12u12.74.3-102.74.3-10.12.74.3-11
Show 11 moreShow less
2.74.3-22.74.3-32.74.3-3.1~exp12.74.3-3.1~exp22.74.3-3.1~exp32.74.3-52.74.3-62.74.3-72.74.3-82.74.3-8.12.74.3-9
 None known
libsoup2.4
Debian:13
 All versions, plus listed versions
2.74.3-10.12.74.3-11
 None known
libsoup3
Debian:12
 All versions, plus listed versions
3.2.2-23.2.3-0+deb12u13.2.3-0+deb12u23.3.1-13.4.0-1
Show 33 moreShow less
3.4.1-13.4.2-13.4.2-23.4.2-33.4.2-43.4.3-13.4.4-13.4.4-23.4.4-33.4.4-43.4.4-53.5.2-13.6.0-13.6.0-23.6.0-33.6.0-43.6.1-13.6.4-13.6.4-23.6.4-33.6.5-13.6.5-23.6.5-33.6.5-43.6.5-53.6.5-63.6.5-73.6.5-83.6.5-93.6.6-13.8.0-13.8.0-23.8.0-3
 None known
libsoup3
Debian:13
 All versions, plus listed versions
3.6.5-33.6.5-43.6.5-53.6.5-63.6.5-7
Show 6 moreShow less
3.6.5-83.6.5-93.6.6-13.8.0-13.8.0-23.8.0-3
 None known
libsoup
SUSE:Linux Micro 6.0
From an advisory covering 15 CVEs
 before 3.4.2-159998.1.1
3.4.2-159998.1.1
libsoup
SUSE:Linux Enterprise Server 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1
libsoup
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1
libsoup
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 14 CVEs
 before 2.62.2-5.49.1
2.62.2-5.49.1
libsoup
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 14 CVEs
 before 2.62.2-5.49.1
2.62.2-5.49.1
Show 48 moreShow less
Affected packages
PackageAffectedFixed
libsoup2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 3.4.4-150600.3.62.1
3.4.4-150600.3.62.1
libsoup
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 3.4.4-150600.3.62.1
3.4.4-150600.3.62.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 3.4.4-150600.3.62.1
3.4.4-150600.3.62.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 3.0.4-150400.3.58.1
3.0.4-150400.3.58.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 3.0.4-150400.3.58.1
3.0.4-150400.3.58.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 3.0.4-150400.3.58.1
3.0.4-150400.3.58.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 3.0.4-150400.3.58.1
3.0.4-150400.3.58.1
libsoup
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 3.0.4-150400.3.58.1
3.0.4-150400.3.58.1
libsoup
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 3.0.4-150400.3.58.1
3.0.4-150400.3.58.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 3.0.4-150400.3.58.1
3.0.4-150400.3.58.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 3.0.4-150400.3.58.1
3.0.4-150400.3.58.1
libsoup2.4
Ubuntu:Pro:16.04:LTS
 before 2.52.2-1ubuntu0.3+esm9, plus listed versions
2.50.0-2debian12.52.1-12.52.2-12.52.2-1ubuntu0.12.52.2-1ubuntu0.2
Show 9 moreShow less
2.52.2-1ubuntu0.32.52.2-1ubuntu0.3+esm12.52.2-1ubuntu0.3+esm22.52.2-1ubuntu0.3+esm32.52.2-1ubuntu0.3+esm42.52.2-1ubuntu0.3+esm52.52.2-1ubuntu0.3+esm62.52.2-1ubuntu0.3+esm72.52.2-1ubuntu0.3+esm8
2.52.2-1ubuntu0.3+esm9
libsoup2.4
Ubuntu:Pro:18.04:LTS
 before 2.62.1-1ubuntu0.4+esm10, plus listed versions
2.60.1-12.60.2-12.60.2-22.60.3-12.61.90-1
Show 14 moreShow less
2.62.0-12.62.1-12.62.1-1ubuntu0.12.62.1-1ubuntu0.32.62.1-1ubuntu0.42.62.1-1ubuntu0.4+esm12.62.1-1ubuntu0.4+esm22.62.1-1ubuntu0.4+esm32.62.1-1ubuntu0.4+esm42.62.1-1ubuntu0.4+esm52.62.1-1ubuntu0.4+esm62.62.1-1ubuntu0.4+esm72.62.1-1ubuntu0.4+esm82.62.1-1ubuntu0.4+esm9
2.62.1-1ubuntu0.4+esm10
libsoup2.4
Ubuntu:Pro:20.04:LTS
 before 2.70.0-1ubuntu0.5+esm5, plus listed versions
2.68.2-0ubuntu12.68.2-12.68.2-22.68.2-2build22.69.90-1
Show 10 moreShow less
2.70.0-12.70.0-1ubuntu0.12.70.0-1ubuntu0.22.70.0-1ubuntu0.32.70.0-1ubuntu0.42.70.0-1ubuntu0.52.70.0-1ubuntu0.5+esm12.70.0-1ubuntu0.5+esm22.70.0-1ubuntu0.5+esm32.70.0-1ubuntu0.5+esm4
2.70.0-1ubuntu0.5+esm5
libsoup2.4
Ubuntu:22.04:LTS
 before 2.74.2-3ubuntu0.10, plus listed versions
2.72.0-3ubuntu32.74.1-12.74.2-22.74.2-32.74.2-3ubuntu0.1
Show 8 moreShow less
2.74.2-3ubuntu0.22.74.2-3ubuntu0.32.74.2-3ubuntu0.42.74.2-3ubuntu0.52.74.2-3ubuntu0.62.74.2-3ubuntu0.72.74.2-3ubuntu0.82.74.2-3ubuntu0.9
2.74.2-3ubuntu0.10
libsoup3
Ubuntu:Pro:22.04:LTS
 before 3.0.7-0ubuntu1+esm10, plus listed versions
3.0.4-23.0.4-33.0.5-13.0.7-0ubuntu13.0.7-0ubuntu1+esm1
Show 8 moreShow less
3.0.7-0ubuntu1+esm23.0.7-0ubuntu1+esm33.0.7-0ubuntu1+esm43.0.7-0ubuntu1+esm53.0.7-0ubuntu1+esm63.0.7-0ubuntu1+esm73.0.7-0ubuntu1+esm83.0.7-0ubuntu1+esm9
3.0.7-0ubuntu1+esm10
libsoup2.4
Ubuntu:24.04:LTS
 before 2.74.3-6ubuntu1.10, plus listed versions
2.74.3-12.74.3-22.74.3-32.74.3-62.74.3-6build1
Show 10 moreShow less
2.74.3-6ubuntu12.74.3-6ubuntu1.12.74.3-6ubuntu1.22.74.3-6ubuntu1.32.74.3-6ubuntu1.42.74.3-6ubuntu1.52.74.3-6ubuntu1.62.74.3-6ubuntu1.72.74.3-6ubuntu1.82.74.3-6ubuntu1.9
2.74.3-6ubuntu1.10
libsoup3
Ubuntu:24.04:LTS
 before 3.4.4-5ubuntu0.10, plus listed versions
3.4.2-43.4.4-13.4.4-23.4.4-43.4.4-5
Show 11 moreShow less
3.4.4-5build13.4.4-5build23.4.4-5ubuntu0.13.4.4-5ubuntu0.23.4.4-5ubuntu0.33.4.4-5ubuntu0.43.4.4-5ubuntu0.53.4.4-5ubuntu0.63.4.4-5ubuntu0.73.4.4-5ubuntu0.83.4.4-5ubuntu0.9
3.4.4-5ubuntu0.10
libsoup2.4
Ubuntu:26.10
 All versions, plus listed versions
2.74.3-10.1ubuntu5
 None known
libsoup3
Ubuntu:26.10
 before 3.6.6-1ubuntu3.1, plus listed versions
3.6.6-13.6.6-1ubuntu3
3.6.6-1ubuntu3.1
libsoup3
Ubuntu:26.04:LTS
 before 3.6.6-1ubuntu0.2, plus listed versions
3.6.5-43.6.5-53.6.5-63.6.5-73.6.5-93.6.6-13.6.6-1ubuntu0.1
3.6.6-1ubuntu0.2
libsoup2.4
Ubuntu:Pro:26.04:LTS
 before 2.74.3-10.1ubuntu5+esm4, plus listed versions
2.74.3-10.1ubuntu42.74.3-10.1ubuntu52.74.3-10.1ubuntu5+esm12.74.3-10.1ubuntu5+esm22.74.3-10.1ubuntu5+esm3
2.74.3-10.1ubuntu5+esm4
libsoup2.4
Ubuntu:Pro:16.04:LTS
From an advisory covering 10 CVEs
 before 2.52.2-1ubuntu0.3+esm9, plus listed versions
2.50.0-2debian12.52.1-12.52.2-12.52.2-1ubuntu0.12.52.2-1ubuntu0.2
Show 9 moreShow less
2.52.2-1ubuntu0.32.52.2-1ubuntu0.3+esm12.52.2-1ubuntu0.3+esm22.52.2-1ubuntu0.3+esm32.52.2-1ubuntu0.3+esm42.52.2-1ubuntu0.3+esm52.52.2-1ubuntu0.3+esm62.52.2-1ubuntu0.3+esm72.52.2-1ubuntu0.3+esm8
2.52.2-1ubuntu0.3+esm9
libsoup2.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 10 CVEs
 before 2.62.1-1ubuntu0.4+esm10, plus listed versions
2.60.1-12.60.2-12.60.2-22.60.3-12.61.90-1
Show 14 moreShow less
2.62.0-12.62.1-12.62.1-1ubuntu0.12.62.1-1ubuntu0.32.62.1-1ubuntu0.42.62.1-1ubuntu0.4+esm12.62.1-1ubuntu0.4+esm22.62.1-1ubuntu0.4+esm32.62.1-1ubuntu0.4+esm42.62.1-1ubuntu0.4+esm52.62.1-1ubuntu0.4+esm62.62.1-1ubuntu0.4+esm72.62.1-1ubuntu0.4+esm82.62.1-1ubuntu0.4+esm9
2.62.1-1ubuntu0.4+esm10
libsoup2.4
Ubuntu:Pro:20.04:LTS
From an advisory covering 10 CVEs
 before 2.70.0-1ubuntu0.5+esm5, plus listed versions
2.68.2-0ubuntu12.68.2-12.68.2-22.68.2-2build22.69.90-1
Show 10 moreShow less
2.70.0-12.70.0-1ubuntu0.12.70.0-1ubuntu0.22.70.0-1ubuntu0.32.70.0-1ubuntu0.42.70.0-1ubuntu0.52.70.0-1ubuntu0.5+esm12.70.0-1ubuntu0.5+esm22.70.0-1ubuntu0.5+esm32.70.0-1ubuntu0.5+esm4
2.70.0-1ubuntu0.5+esm5
libsoup2.4
Ubuntu:22.04:LTS
From an advisory covering 10 CVEs
 before 2.74.2-3ubuntu0.10, plus listed versions
2.72.0-3ubuntu32.74.1-12.74.2-22.74.2-32.74.2-3ubuntu0.1
Show 8 moreShow less
2.74.2-3ubuntu0.22.74.2-3ubuntu0.32.74.2-3ubuntu0.42.74.2-3ubuntu0.52.74.2-3ubuntu0.62.74.2-3ubuntu0.72.74.2-3ubuntu0.82.74.2-3ubuntu0.9
2.74.2-3ubuntu0.10
libsoup3
Ubuntu:Pro:22.04:LTS
From an advisory covering 10 CVEs
 before 3.0.7-0ubuntu1+esm10, plus listed versions
3.0.4-23.0.4-33.0.5-13.0.7-0ubuntu13.0.7-0ubuntu1+esm1
Show 8 moreShow less
3.0.7-0ubuntu1+esm23.0.7-0ubuntu1+esm33.0.7-0ubuntu1+esm43.0.7-0ubuntu1+esm53.0.7-0ubuntu1+esm63.0.7-0ubuntu1+esm73.0.7-0ubuntu1+esm83.0.7-0ubuntu1+esm9
3.0.7-0ubuntu1+esm10
libsoup2.4
Ubuntu:24.04:LTS
From an advisory covering 10 CVEs
 before 2.74.3-6ubuntu1.10, plus listed versions
2.74.3-12.74.3-22.74.3-32.74.3-62.74.3-6build1
Show 10 moreShow less
2.74.3-6ubuntu12.74.3-6ubuntu1.12.74.3-6ubuntu1.22.74.3-6ubuntu1.32.74.3-6ubuntu1.42.74.3-6ubuntu1.52.74.3-6ubuntu1.62.74.3-6ubuntu1.72.74.3-6ubuntu1.82.74.3-6ubuntu1.9
2.74.3-6ubuntu1.10
libsoup3
Ubuntu:24.04:LTS
From an advisory covering 10 CVEs
 before 3.4.4-5ubuntu0.10, plus listed versions
3.4.2-43.4.4-13.4.4-23.4.4-43.4.4-5
Show 11 moreShow less
3.4.4-5build13.4.4-5build23.4.4-5ubuntu0.13.4.4-5ubuntu0.23.4.4-5ubuntu0.33.4.4-5ubuntu0.43.4.4-5ubuntu0.53.4.4-5ubuntu0.63.4.4-5ubuntu0.73.4.4-5ubuntu0.83.4.4-5ubuntu0.9
3.4.4-5ubuntu0.10
libsoup3
Ubuntu:26.10
From an advisory covering 10 CVEs
 before 3.6.6-1ubuntu3.1, plus listed versions
3.6.6-13.6.6-1ubuntu3
3.6.6-1ubuntu3.1
libsoup3
Ubuntu:26.04:LTS
From an advisory covering 10 CVEs
 before 3.6.6-1ubuntu0.2, plus listed versions
3.6.5-43.6.5-53.6.5-63.6.5-73.6.5-93.6.6-13.6.6-1ubuntu0.1
3.6.6-1ubuntu0.2
libsoup2.4
Ubuntu:Pro:26.04:LTS
From an advisory covering 10 CVEs
 before 2.74.3-10.1ubuntu5+esm4, plus listed versions
2.74.3-10.1ubuntu42.74.3-10.1ubuntu52.74.3-10.1ubuntu5+esm12.74.3-10.1ubuntu5+esm22.74.3-10.1ubuntu5+esm3
2.74.3-10.1ubuntu5+esm4
libsoup2
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.74.3-25.1
2.74.3-25.1
libsoup
openSUSE:Leap 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1

History

History
RecordedChangedSources
affectedCVE List, EUVD, NVD, OSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, factsCVE List, EUVD, OSV
affected, aliases, references
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-103399 is a medium vulnerability (CVSS 5.3) in Red Hat Enterprise Linux 10, published September 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 15th percentile. Fixed in libsoup 3.4.4-150600.3.62.1.

References

Show 57 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open