Every CVE Search/ Get API key

CVE-2026-15714

Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string

6.5 Medium

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
Low

Exploit likelihood

0.39%Unchanged since Jul 15, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.5

Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.

Record
CVE-2026-15714
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-125
Updated
2026-11-05
EUVDEUVD-2026-44435 6.5

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.

Record
EUVD-2026-44435
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-05
GitHub AdvisoriesGHSA-pr44-vh8f-w48v 6.5

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The...

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.

Record
GHSA-pr44-vh8f-w48v
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-125
Updated
2026-11-02
NVD 6.5

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.

Record
CVE-2026-15714
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-125
Updated
2026-11-05
OSVDEBIAN-CVE-2026-15714 6.5

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.

Record
DEBIAN-CVE-2026-15714
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVOESA-2026-4040 7.5

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).(CVE-2026-15709)

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated attacker acting as a malicious network peer can trick the connection engine into allocating stream states that are subsequently leaked during cleanup. Over a sustained period, this flaw allows the remote attacker to consume the system's heap allocations incrementally, triggering a denial of service (DoS) through an ultimate Out-of-Memory (OOM) application crash.(CVE-2026-15713)

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.(CVE-2026-15714)

A vulnerability classified as problematic has been found in GNOME libsoup (affected version unknown). CWE is classifying the issue as CWE-93. The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. This is going to have an impact on integrity. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-3633)

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.(CVE-2026-66339)

Record
OESA-2026-4040
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVOESA-2026-4041 7.5

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).(CVE-2025-32049)

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).(CVE-2026-15709)

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated attacker acting as a malicious network peer can trick the connection engine into allocating stream states that are subsequently leaked during cleanup. Over a sustained period, this flaw allows the remote attacker to consume the system's heap allocations incrementally, triggering a denial of service (DoS) through an ultimate Out-of-Memory (OOM) application crash.(CVE-2026-15713)

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.(CVE-2026-15714)

A vulnerability classified as problematic has been found in GNOME libsoup (affected version unknown). CWE is classifying the issue as CWE-93. The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. This is going to have an impact on integrity. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-3633)

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.(CVE-2026-66339)

Record
OESA-2026-4041
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-4042 7.5

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).(CVE-2026-15709)

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated attacker acting as a malicious network peer can trick the connection engine into allocating stream states that are subsequently leaked during cleanup. Over a sustained period, this flaw allows the remote attacker to consume the system's heap allocations incrementally, triggering a denial of service (DoS) through an ultimate Out-of-Memory (OOM) application crash.(CVE-2026-15713)

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.(CVE-2026-15714)

A vulnerability classified as problematic has been found in GNOME libsoup (affected version unknown). CWE is classifying the issue as CWE-93. The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. This is going to have an impact on integrity. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-3633)

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.(CVE-2026-66339)

Record
OESA-2026-4042
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-4043 7.5

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).(CVE-2026-15709)

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated attacker acting as a malicious network peer can trick the connection engine into allocating stream states that are subsequently leaked during cleanup. Over a sustained period, this flaw allows the remote attacker to consume the system's heap allocations incrementally, triggering a denial of service (DoS) through an ultimate Out-of-Memory (OOM) application crash.(CVE-2026-15713)

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.(CVE-2026-15714)

A vulnerability classified as problematic has been found in GNOME libsoup (affected version unknown). CWE is classifying the issue as CWE-93. The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. This is going to have an impact on integrity. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-3633)

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.(CVE-2026-66339)

Record
OESA-2026-4043
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-4044 7.5

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS).(CVE-2026-15709)

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated attacker acting as a malicious network peer can trick the connection engine into allocating stream states that are subsequently leaked during cleanup. Over a sustained period, this flaw allows the remote attacker to consume the system's heap allocations incrementally, triggering a denial of service (DoS) through an ultimate Out-of-Memory (OOM) application crash.(CVE-2026-15713)

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.(CVE-2026-15714)

A vulnerability classified as problematic has been found in GNOME libsoup (affected version unknown). CWE is classifying the issue as CWE-93. The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. This is going to have an impact on integrity. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-3633)

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.(CVE-2026-66339)

Record
OESA-2026-4044
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-15714 6.5

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.

Record
UBUNTU-CVE-2026-15714
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-03
OSVAZL-92405 No score

CVE-2026-15714 affecting package libsoup 3.4.4-18

An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata.

Record
AZL-92405
Updated
2026-11-05
OSVopenSUSE-SU-2026:12084-1 No score

libsoup-2_4-1-2.74.3-24.1 on GA media

These are all security issues fixed in the libsoup-2_4-1-2.74.3-24.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12084-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:12365-1 No score

libsoup-3_0-0-3.8.1-1.1 on GA media

These are all security issues fixed in the libsoup-3_0-0-3.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12365-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22181-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
openSUSE-SU-2026:22181-1
Updated
2026-11-02
OSVSUSE-SU-2026:24368-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:24368-1
Updated
2026-11-02
OSVSUSE-SU-2026:24470-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:24470-1
Updated
2026-11-04
OSVSUSE-SU-2026:4557-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401).
  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
Record
SUSE-SU-2026:4557-1
Updated
2026-11-02
OSVSUSE-SU-2026:4558-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401).
  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
Record
SUSE-SU-2026:4558-1
Updated
2026-11-02
OSVSUSE-SU-2026:4690-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401).
  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4690-1
Updated
2026-11-02
OSVSUSE-SU-2026:4703-1 No score

Security update for libsoup2

This update for libsoup2 fixes the following issues:

  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988).
  • CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4703-1
Updated
2026-11-02
OSVSUSE-SU-2026:4739-1 No score

Security update for libsoup2

This update for libsoup2 fixes the following issues:

  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988).
  • CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4739-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libsoup
Azure Linux:3
 through 3.4.4-18 None known
libsoup2.4
Debian:12
 All versions, plus listed versions
2.74.3-12.74.3-1+deb12u12.74.3-102.74.3-10.12.74.3-11
Show 11 moreShow less
2.74.3-22.74.3-32.74.3-3.1~exp12.74.3-3.1~exp22.74.3-3.1~exp32.74.3-52.74.3-62.74.3-72.74.3-82.74.3-8.12.74.3-9
 None known
libsoup2.4
Debian:13
 All versions, plus listed versions
2.74.3-10.12.74.3-11
 None known
libsoup3
Debian:12
 All versions, plus listed versions
3.2.2-23.2.3-0+deb12u13.2.3-0+deb12u23.3.1-13.4.0-1
Show 33 moreShow less
3.4.1-13.4.2-13.4.2-23.4.2-33.4.2-43.4.3-13.4.4-13.4.4-23.4.4-33.4.4-43.4.4-53.5.2-13.6.0-13.6.0-23.6.0-33.6.0-43.6.1-13.6.4-13.6.4-23.6.4-33.6.5-13.6.5-23.6.5-33.6.5-43.6.5-53.6.5-63.6.5-73.6.5-83.6.5-93.6.6-13.8.0-13.8.0-23.8.0-3
 None known
libsoup3
Debian:13
 All versions, plus listed versions
3.6.5-33.6.5-43.6.5-53.6.5-63.6.5-7
Show 6 moreShow less
3.6.5-83.6.5-93.6.6-13.8.0-13.8.0-23.8.0-3
 None known
libsoup
openEuler:24.03-LTS-SP3
From an advisory covering 5 CVEs
 before 2.74.3-27.oe2403sp3
2.74.3-27.oe2403sp3
libsoup
openEuler:24.03-LTS-SP4
From an advisory covering 6 CVEs
 before 2.74.3-27.oe2403sp4
2.74.3-27.oe2403sp4
libsoup
openEuler:20.03-LTS-SP4
From an advisory covering 5 CVEs
 before 2.71.0-23.oe2003sp4
2.71.0-23.oe2003sp4
libsoup
openEuler:22.03-LTS-SP4
From an advisory covering 5 CVEs
 before 2.74.2-24.oe2203sp4
2.74.2-24.oe2203sp4
libsoup
openEuler:24.03-LTS-SP1
From an advisory covering 5 CVEs
 before 2.74.3-27.oe2403sp1
2.74.3-27.oe2403sp1
Show 44 moreShow less
Affected packages
PackageAffectedFixed
libsoup
SUSE:Linux Micro 6.0
From an advisory covering 15 CVEs
 before 3.4.2-159998.1.1
3.4.2-159998.1.1
libsoup
SUSE:Linux Enterprise Server 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1
libsoup
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 6 CVEs
 before 3.4.4-150600.3.56.1
3.4.4-150600.3.56.1
libsoup
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 6 CVEs
 before 3.4.4-150600.3.56.1
3.4.4-150600.3.56.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 6 CVEs
 before 3.4.4-150600.3.56.1
3.4.4-150600.3.56.1
libsoup
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 14 CVEs
 before 2.62.2-5.49.1
2.62.2-5.49.1
libsoup
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 14 CVEs
 before 2.62.2-5.49.1
2.62.2-5.49.1
libsoup2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2.4
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.50.0-2debian12.52.1-12.52.2-12.52.2-1ubuntu0.12.52.2-1ubuntu0.2
Show 10 moreShow less
2.52.2-1ubuntu0.32.52.2-1ubuntu0.3+esm12.52.2-1ubuntu0.3+esm22.52.2-1ubuntu0.3+esm32.52.2-1ubuntu0.3+esm42.52.2-1ubuntu0.3+esm52.52.2-1ubuntu0.3+esm62.52.2-1ubuntu0.3+esm72.52.2-1ubuntu0.3+esm82.52.2-1ubuntu0.3+esm9
 None known
libsoup2.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.60.1-12.60.2-12.60.2-22.60.3-12.61.90-1
Show 15 moreShow less
2.62.0-12.62.1-12.62.1-1ubuntu0.12.62.1-1ubuntu0.32.62.1-1ubuntu0.42.62.1-1ubuntu0.4+esm12.62.1-1ubuntu0.4+esm22.62.1-1ubuntu0.4+esm32.62.1-1ubuntu0.4+esm42.62.1-1ubuntu0.4+esm52.62.1-1ubuntu0.4+esm62.62.1-1ubuntu0.4+esm72.62.1-1ubuntu0.4+esm82.62.1-1ubuntu0.4+esm92.62.1-1ubuntu0.4+esm10
 None known
libsoup2.4
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.68.2-0ubuntu12.68.2-12.68.2-22.68.2-2build22.69.90-1
Show 11 moreShow less
2.70.0-12.70.0-1ubuntu0.12.70.0-1ubuntu0.22.70.0-1ubuntu0.32.70.0-1ubuntu0.42.70.0-1ubuntu0.52.70.0-1ubuntu0.5+esm12.70.0-1ubuntu0.5+esm22.70.0-1ubuntu0.5+esm32.70.0-1ubuntu0.5+esm42.70.0-1ubuntu0.5+esm5
 None known
libsoup2.4
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.72.0-3ubuntu32.74.1-12.74.2-22.74.2-32.74.2-3ubuntu0.1
Show 9 moreShow less
2.74.2-3ubuntu0.22.74.2-3ubuntu0.32.74.2-3ubuntu0.42.74.2-3ubuntu0.52.74.2-3ubuntu0.62.74.2-3ubuntu0.72.74.2-3ubuntu0.82.74.2-3ubuntu0.92.74.2-3ubuntu0.10
 None known
libsoup3
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
3.0.4-23.0.4-33.0.5-13.0.7-0ubuntu13.0.7-0ubuntu1+esm1
Show 9 moreShow less
3.0.7-0ubuntu1+esm23.0.7-0ubuntu1+esm33.0.7-0ubuntu1+esm43.0.7-0ubuntu1+esm53.0.7-0ubuntu1+esm63.0.7-0ubuntu1+esm73.0.7-0ubuntu1+esm83.0.7-0ubuntu1+esm93.0.7-0ubuntu1+esm10
 None known
libsoup2.4
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.74.3-12.74.3-22.74.3-32.74.3-62.74.3-6build1
Show 11 moreShow less
2.74.3-6ubuntu12.74.3-6ubuntu1.12.74.3-6ubuntu1.22.74.3-6ubuntu1.32.74.3-6ubuntu1.42.74.3-6ubuntu1.52.74.3-6ubuntu1.62.74.3-6ubuntu1.72.74.3-6ubuntu1.82.74.3-6ubuntu1.92.74.3-6ubuntu1.10
 None known
libsoup3
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.4.2-43.4.4-13.4.4-23.4.4-43.4.4-5
Show 12 moreShow less
3.4.4-5build13.4.4-5build23.4.4-5ubuntu0.13.4.4-5ubuntu0.23.4.4-5ubuntu0.33.4.4-5ubuntu0.43.4.4-5ubuntu0.53.4.4-5ubuntu0.63.4.4-5ubuntu0.73.4.4-5ubuntu0.83.4.4-5ubuntu0.93.4.4-5ubuntu0.10
 None known
libsoup2.4
Ubuntu:26.10
 All versions, plus listed versions
2.74.3-10.1ubuntu5
 None known
libsoup3
Ubuntu:26.10
 All versions, plus listed versions
3.6.6-13.6.6-1ubuntu33.6.6-1ubuntu3.1
 None known
libsoup3
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.6.5-43.6.5-53.6.5-63.6.5-73.6.5-93.6.6-13.6.6-1ubuntu0.13.6.6-1ubuntu0.2
 None known
libsoup2.4
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
2.74.3-10.1ubuntu42.74.3-10.1ubuntu52.74.3-10.1ubuntu5+esm12.74.3-10.1ubuntu5+esm22.74.3-10.1ubuntu5+esm32.74.3-10.1ubuntu5+esm4
 None known
libsoup2
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 2.74.3-24.1
2.74.3-24.1
libsoup
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 3.8.1-1.1
3.8.1-1.1
libsoup
openSUSE:Leap 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1

History

History
RecordedChangedSources
affected, factsCVE List, EUVD, NVD, OSV
affected, aliases, referencesOSV
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-15714 is a medium vulnerability (CVSS 6.5) in Red Hat Enterprise Linux 10, published July 14, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.

References

Show 60 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open