Every CVE Search/ Get API key

CVE-2026-12547

Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch

3.4 LowFix available

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

0.23%Unchanged since Jul 22, 2026
90%50%10%1%

What each source reports

CVE List Score used 3.4

Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Record
CVE-2026-12547
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Weakness
CWE-201
Updated
2026-11-06
EUVDEUVD-2026-46361 3.4

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Record
EUVD-2026-46361
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-06
GitHub AdvisoriesGHSA-gmf9-8jmv-v2q8 3.4

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy...

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Record
GHSA-gmf9-8jmv-v2q8
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Weakness
CWE-201
Updated
2026-11-02
NVD 3.4

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Record
CVE-2026-12547
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Weakness
CWE-201
Updated
2026-11-06
OSVDEBIAN-CVE-2026-12547 3.4

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Record
DEBIAN-CVE-2026-12547
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
OSVOESA-2026-4388 3.4

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.(CVE-2026-12547)

Record
OESA-2026-4388
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-02
Show 16 moreShow less
OSVOESA-2026-4389 6.5

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.(CVE-2026-12547)

A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client application to crash or disclose sensitive heap memory.(CVE-2026-66337)

Record
OESA-2026-4389
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVOESA-2026-4390 6.5

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.(CVE-2026-12547)

A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client application to crash or disclose sensitive heap memory.(CVE-2026-66337)

Record
OESA-2026-4390
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVOESA-2026-4391 6.5

libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.

Security Fix(es):

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.(CVE-2026-12547)

A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client application to crash or disclose sensitive heap memory.(CVE-2026-66337)

A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including leading whitespace, plus sign prefixes, and trailing invalid characters. When libsoup operates behind a strict frontend proxy, this parsing differential can be exploited to smuggle HTTP requests.(CVE-2026-66338)

Record
OESA-2026-4391
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2026-12547 3.4

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Record
UBUNTU-CVE-2026-12547
CVSS 3.1
3.4 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Updated
2026-11-04
OSVAZL-93237 No score

CVE-2026-12547 affecting package libsoup 3.4.4-18

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Record
AZL-93237
Updated
2026-11-05
OSVopenSUSE-SU-2026:12084-1 No score

libsoup-2_4-1-2.74.3-24.1 on GA media

These are all security issues fixed in the libsoup-2_4-1-2.74.3-24.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12084-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:12365-1 No score

libsoup-3_0-0-3.8.1-1.1 on GA media

These are all security issues fixed in the libsoup-3_0-0-3.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12365-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22181-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
openSUSE-SU-2026:22181-1
Updated
2026-11-02
OSVSUSE-SU-2026:24368-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:24368-1
Updated
2026-11-02
OSVSUSE-SU-2026:24470-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:24470-1
Updated
2026-11-04
OSVSUSE-SU-2026:4557-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401).
  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
Record
SUSE-SU-2026:4557-1
Updated
2026-11-02
OSVSUSE-SU-2026:4558-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401).
  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
Record
SUSE-SU-2026:4558-1
Updated
2026-11-02
OSVSUSE-SU-2026:4690-1 No score

Security update for libsoup

This update for libsoup fixes the following issues:

  • CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401).
  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4690-1
Updated
2026-11-02
OSVSUSE-SU-2026:4703-1 No score

Security update for libsoup2

This update for libsoup2 fixes the following issues:

  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988).
  • CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4703-1
Updated
2026-11-02
OSVSUSE-SU-2026:4739-1 No score

Security update for libsoup2

This update for libsoup2 fixes the following issues:

  • CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195).
  • CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446).
  • CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448).
  • CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449).
  • CVE-2026-66339: proxy credentials leak to destination server via Proxy-Authorization header in CONNECT tunnels (bsc#1273156).
  • CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988).
  • CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759).
  • CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300).
  • CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301).
  • CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302).
  • CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303).
  • CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304).
  • CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).
Record
SUSE-SU-2026:4739-1
Updated
2026-11-02
OSVUSN-8975-1 No score

libsoup2.4, libsoup3 vulnerabilities

It was discovered that libsoup incorrectly handled certain WebSocket frames. A remote attacker could possibly use this issue to cause an application to crash or expose sensitive information. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-12478)

It was discovered that libsoup incorrectly handled certain data URIs. A remote attacker could possibly use this issue to cause an application to crash or expose sensitive information. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-102555)

It was discovered that libsoup incorrectly handled certain WebSocket messages. A remote attacker could possibly use this issue to cause an application to crash. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-102556)

It was discovered that libsoup incorrectly handled fragmented WebSocket messages. A remote attacker could possibly use this issue to cause an application to crash. (CVE-2026-102557)

It was discovered that libsoup incorrectly handled certain WebSocket frames. A remote attacker could possibly use this issue to cause an application to crash. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-102558)

It was discovered that libsoup incorrectly handled large WebSocket messages. An attacker could possibly use this issue to cause an application to crash. (CVE-2026-102559)

It was discovered that libsoup incorrectly handled compressed WebSocket messages. An attacker could possibly use this issue to cause an application to crash. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2026-102560)

It was discovered that libsoup did not properly handle certain HTTP requests. A remote attacker could possibly use this issue to inject arbitrary HTTP requests. (CVE-2026-103399)

It was discovered that libsoup incorrectly handled proxy credentials. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-12547)

It was discovered that libsoup incorrectly handled multipart messages. A remote attacker could possibly use this issue to cause an application to crash or obtain sensitive information. (CVE-2026-12548)

Record
USN-8975-1
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libsoup
Azure Linux:3
 through 3.4.4-18 None known
libsoup2.4
Debian:12
 All versions, plus listed versions
2.74.3-12.74.3-1+deb12u12.74.3-102.74.3-10.12.74.3-11
Show 11 moreShow less
2.74.3-22.74.3-32.74.3-3.1~exp12.74.3-3.1~exp22.74.3-3.1~exp32.74.3-52.74.3-62.74.3-72.74.3-82.74.3-8.12.74.3-9
 None known
libsoup2.4
Debian:13
 All versions, plus listed versions
2.74.3-10.12.74.3-11
 None known
libsoup3
Debian:12
 All versions, plus listed versions
3.2.2-23.2.3-0+deb12u13.2.3-0+deb12u23.3.1-13.4.0-1
Show 33 moreShow less
3.4.1-13.4.2-13.4.2-23.4.2-33.4.2-43.4.3-13.4.4-13.4.4-23.4.4-33.4.4-43.4.4-53.5.2-13.6.0-13.6.0-23.6.0-33.6.0-43.6.1-13.6.4-13.6.4-23.6.4-33.6.5-13.6.5-23.6.5-33.6.5-43.6.5-53.6.5-63.6.5-73.6.5-83.6.5-93.6.6-13.8.0-13.8.0-23.8.0-3
 None known
libsoup3
Debian:13
 All versions, plus listed versions
3.6.5-33.6.5-43.6.5-53.6.5-63.6.5-7
Show 6 moreShow less
3.6.5-83.6.5-93.6.6-13.8.0-13.8.0-23.8.0-3
 None known
libsoup
openEuler:22.03-LTS-SP4
 before 2.74.2-25.oe2203sp4
2.74.2-25.oe2203sp4
libsoup
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.74.3-29.oe2403sp1
2.74.3-29.oe2403sp1
libsoup
openEuler:24.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.74.3-29.oe2403sp3
2.74.3-29.oe2403sp3
libsoup
openEuler:24.03-LTS-SP4
From an advisory covering 3 CVEs
 before 2.74.3-29.oe2403sp4
2.74.3-29.oe2403sp4
libsoup
SUSE:Linux Micro 6.0
From an advisory covering 15 CVEs
 before 3.4.2-159998.1.1
3.4.2-159998.1.1
Show 53 moreShow less
Affected packages
PackageAffectedFixed
libsoup
SUSE:Linux Enterprise Server 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1
libsoup
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 6 CVEs
 before 3.0.4-150400.3.52.1
3.0.4-150400.3.52.1
libsoup
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 6 CVEs
 before 3.4.4-150600.3.56.1
3.4.4-150600.3.56.1
libsoup
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 6 CVEs
 before 3.4.4-150600.3.56.1
3.4.4-150600.3.56.1
libsoup
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 6 CVEs
 before 3.4.4-150600.3.56.1
3.4.4-150600.3.56.1
libsoup
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 14 CVEs
 before 2.62.2-5.49.1
2.62.2-5.49.1
libsoup
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 14 CVEs
 before 2.62.2-5.49.1
2.62.2-5.49.1
libsoup2
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 15 CVEs
 before 2.74.3-150600.4.42.1
2.74.3-150600.4.42.1
libsoup2
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 15 CVEs
 before 2.74.3-150400.3.43.1
2.74.3-150400.3.43.1
libsoup2.4
Ubuntu:Pro:16.04:LTS
 before 2.52.2-1ubuntu0.3+esm9, plus listed versions
2.50.0-2debian12.52.1-12.52.2-12.52.2-1ubuntu0.12.52.2-1ubuntu0.2
Show 9 moreShow less
2.52.2-1ubuntu0.32.52.2-1ubuntu0.3+esm12.52.2-1ubuntu0.3+esm22.52.2-1ubuntu0.3+esm32.52.2-1ubuntu0.3+esm42.52.2-1ubuntu0.3+esm52.52.2-1ubuntu0.3+esm62.52.2-1ubuntu0.3+esm72.52.2-1ubuntu0.3+esm8
2.52.2-1ubuntu0.3+esm9
libsoup2.4
Ubuntu:Pro:18.04:LTS
 before 2.62.1-1ubuntu0.4+esm10, plus listed versions
2.60.1-12.60.2-12.60.2-22.60.3-12.61.90-1
Show 14 moreShow less
2.62.0-12.62.1-12.62.1-1ubuntu0.12.62.1-1ubuntu0.32.62.1-1ubuntu0.42.62.1-1ubuntu0.4+esm12.62.1-1ubuntu0.4+esm22.62.1-1ubuntu0.4+esm32.62.1-1ubuntu0.4+esm42.62.1-1ubuntu0.4+esm52.62.1-1ubuntu0.4+esm62.62.1-1ubuntu0.4+esm72.62.1-1ubuntu0.4+esm82.62.1-1ubuntu0.4+esm9
2.62.1-1ubuntu0.4+esm10
libsoup2.4
Ubuntu:Pro:20.04:LTS
 before 2.70.0-1ubuntu0.5+esm5, plus listed versions
2.68.2-0ubuntu12.68.2-12.68.2-22.68.2-2build22.69.90-1
Show 10 moreShow less
2.70.0-12.70.0-1ubuntu0.12.70.0-1ubuntu0.22.70.0-1ubuntu0.32.70.0-1ubuntu0.42.70.0-1ubuntu0.52.70.0-1ubuntu0.5+esm12.70.0-1ubuntu0.5+esm22.70.0-1ubuntu0.5+esm32.70.0-1ubuntu0.5+esm4
2.70.0-1ubuntu0.5+esm5
libsoup2.4
Ubuntu:22.04:LTS
 before 2.74.2-3ubuntu0.10, plus listed versions
2.72.0-3ubuntu32.74.1-12.74.2-22.74.2-32.74.2-3ubuntu0.1
Show 8 moreShow less
2.74.2-3ubuntu0.22.74.2-3ubuntu0.32.74.2-3ubuntu0.42.74.2-3ubuntu0.52.74.2-3ubuntu0.62.74.2-3ubuntu0.72.74.2-3ubuntu0.82.74.2-3ubuntu0.9
2.74.2-3ubuntu0.10
libsoup3
Ubuntu:Pro:22.04:LTS
 before 3.0.7-0ubuntu1+esm10, plus listed versions
3.0.4-23.0.4-33.0.5-13.0.7-0ubuntu13.0.7-0ubuntu1+esm1
Show 8 moreShow less
3.0.7-0ubuntu1+esm23.0.7-0ubuntu1+esm33.0.7-0ubuntu1+esm43.0.7-0ubuntu1+esm53.0.7-0ubuntu1+esm63.0.7-0ubuntu1+esm73.0.7-0ubuntu1+esm83.0.7-0ubuntu1+esm9
3.0.7-0ubuntu1+esm10
libsoup2.4
Ubuntu:24.04:LTS
 before 2.74.3-6ubuntu1.10, plus listed versions
2.74.3-12.74.3-22.74.3-32.74.3-62.74.3-6build1
Show 10 moreShow less
2.74.3-6ubuntu12.74.3-6ubuntu1.12.74.3-6ubuntu1.22.74.3-6ubuntu1.32.74.3-6ubuntu1.42.74.3-6ubuntu1.52.74.3-6ubuntu1.62.74.3-6ubuntu1.72.74.3-6ubuntu1.82.74.3-6ubuntu1.9
2.74.3-6ubuntu1.10
libsoup3
Ubuntu:24.04:LTS
 before 3.4.4-5ubuntu0.10, plus listed versions
3.4.2-43.4.4-13.4.4-23.4.4-43.4.4-5
Show 11 moreShow less
3.4.4-5build13.4.4-5build23.4.4-5ubuntu0.13.4.4-5ubuntu0.23.4.4-5ubuntu0.33.4.4-5ubuntu0.43.4.4-5ubuntu0.53.4.4-5ubuntu0.63.4.4-5ubuntu0.73.4.4-5ubuntu0.83.4.4-5ubuntu0.9
3.4.4-5ubuntu0.10
libsoup2.4
Ubuntu:26.10
 All versions, plus listed versions
2.74.3-10.1ubuntu5
 None known
libsoup3
Ubuntu:26.10
 before 3.6.6-1ubuntu3.1, plus listed versions
3.6.6-13.6.6-1ubuntu3
3.6.6-1ubuntu3.1
libsoup3
Ubuntu:26.04:LTS
 before 3.6.6-1ubuntu0.2, plus listed versions
3.6.5-43.6.5-53.6.5-63.6.5-73.6.5-93.6.6-13.6.6-1ubuntu0.1
3.6.6-1ubuntu0.2
libsoup2.4
Ubuntu:Pro:26.04:LTS
 before 2.74.3-10.1ubuntu5+esm4, plus listed versions
2.74.3-10.1ubuntu42.74.3-10.1ubuntu52.74.3-10.1ubuntu5+esm12.74.3-10.1ubuntu5+esm22.74.3-10.1ubuntu5+esm3
2.74.3-10.1ubuntu5+esm4
libsoup2.4
Ubuntu:Pro:16.04:LTS
From an advisory covering 10 CVEs
 before 2.52.2-1ubuntu0.3+esm9, plus listed versions
2.50.0-2debian12.52.1-12.52.2-12.52.2-1ubuntu0.12.52.2-1ubuntu0.2
Show 9 moreShow less
2.52.2-1ubuntu0.32.52.2-1ubuntu0.3+esm12.52.2-1ubuntu0.3+esm22.52.2-1ubuntu0.3+esm32.52.2-1ubuntu0.3+esm42.52.2-1ubuntu0.3+esm52.52.2-1ubuntu0.3+esm62.52.2-1ubuntu0.3+esm72.52.2-1ubuntu0.3+esm8
2.52.2-1ubuntu0.3+esm9
libsoup2.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 10 CVEs
 before 2.62.1-1ubuntu0.4+esm10, plus listed versions
2.60.1-12.60.2-12.60.2-22.60.3-12.61.90-1
Show 14 moreShow less
2.62.0-12.62.1-12.62.1-1ubuntu0.12.62.1-1ubuntu0.32.62.1-1ubuntu0.42.62.1-1ubuntu0.4+esm12.62.1-1ubuntu0.4+esm22.62.1-1ubuntu0.4+esm32.62.1-1ubuntu0.4+esm42.62.1-1ubuntu0.4+esm52.62.1-1ubuntu0.4+esm62.62.1-1ubuntu0.4+esm72.62.1-1ubuntu0.4+esm82.62.1-1ubuntu0.4+esm9
2.62.1-1ubuntu0.4+esm10
libsoup2.4
Ubuntu:Pro:20.04:LTS
From an advisory covering 10 CVEs
 before 2.70.0-1ubuntu0.5+esm5, plus listed versions
2.68.2-0ubuntu12.68.2-12.68.2-22.68.2-2build22.69.90-1
Show 10 moreShow less
2.70.0-12.70.0-1ubuntu0.12.70.0-1ubuntu0.22.70.0-1ubuntu0.32.70.0-1ubuntu0.42.70.0-1ubuntu0.52.70.0-1ubuntu0.5+esm12.70.0-1ubuntu0.5+esm22.70.0-1ubuntu0.5+esm32.70.0-1ubuntu0.5+esm4
2.70.0-1ubuntu0.5+esm5
libsoup2.4
Ubuntu:22.04:LTS
From an advisory covering 10 CVEs
 before 2.74.2-3ubuntu0.10, plus listed versions
2.72.0-3ubuntu32.74.1-12.74.2-22.74.2-32.74.2-3ubuntu0.1
Show 8 moreShow less
2.74.2-3ubuntu0.22.74.2-3ubuntu0.32.74.2-3ubuntu0.42.74.2-3ubuntu0.52.74.2-3ubuntu0.62.74.2-3ubuntu0.72.74.2-3ubuntu0.82.74.2-3ubuntu0.9
2.74.2-3ubuntu0.10
libsoup3
Ubuntu:Pro:22.04:LTS
From an advisory covering 10 CVEs
 before 3.0.7-0ubuntu1+esm10, plus listed versions
3.0.4-23.0.4-33.0.5-13.0.7-0ubuntu13.0.7-0ubuntu1+esm1
Show 8 moreShow less
3.0.7-0ubuntu1+esm23.0.7-0ubuntu1+esm33.0.7-0ubuntu1+esm43.0.7-0ubuntu1+esm53.0.7-0ubuntu1+esm63.0.7-0ubuntu1+esm73.0.7-0ubuntu1+esm83.0.7-0ubuntu1+esm9
3.0.7-0ubuntu1+esm10
libsoup2.4
Ubuntu:24.04:LTS
From an advisory covering 10 CVEs
 before 2.74.3-6ubuntu1.10, plus listed versions
2.74.3-12.74.3-22.74.3-32.74.3-62.74.3-6build1
Show 10 moreShow less
2.74.3-6ubuntu12.74.3-6ubuntu1.12.74.3-6ubuntu1.22.74.3-6ubuntu1.32.74.3-6ubuntu1.42.74.3-6ubuntu1.52.74.3-6ubuntu1.62.74.3-6ubuntu1.72.74.3-6ubuntu1.82.74.3-6ubuntu1.9
2.74.3-6ubuntu1.10
libsoup3
Ubuntu:24.04:LTS
From an advisory covering 10 CVEs
 before 3.4.4-5ubuntu0.10, plus listed versions
3.4.2-43.4.4-13.4.4-23.4.4-43.4.4-5
Show 11 moreShow less
3.4.4-5build13.4.4-5build23.4.4-5ubuntu0.13.4.4-5ubuntu0.23.4.4-5ubuntu0.33.4.4-5ubuntu0.43.4.4-5ubuntu0.53.4.4-5ubuntu0.63.4.4-5ubuntu0.73.4.4-5ubuntu0.83.4.4-5ubuntu0.9
3.4.4-5ubuntu0.10
libsoup3
Ubuntu:26.10
From an advisory covering 10 CVEs
 before 3.6.6-1ubuntu3.1, plus listed versions
3.6.6-13.6.6-1ubuntu3
3.6.6-1ubuntu3.1
libsoup3
Ubuntu:26.04:LTS
From an advisory covering 10 CVEs
 before 3.6.6-1ubuntu0.2, plus listed versions
3.6.5-43.6.5-53.6.5-63.6.5-73.6.5-93.6.6-13.6.6-1ubuntu0.1
3.6.6-1ubuntu0.2
libsoup2.4
Ubuntu:Pro:26.04:LTS
From an advisory covering 10 CVEs
 before 2.74.3-10.1ubuntu5+esm4, plus listed versions
2.74.3-10.1ubuntu42.74.3-10.1ubuntu52.74.3-10.1ubuntu5+esm12.74.3-10.1ubuntu5+esm22.74.3-10.1ubuntu5+esm3
2.74.3-10.1ubuntu5+esm4
libsoup2
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 2.74.3-24.1
2.74.3-24.1
libsoup
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 3.8.1-1.1
3.8.1-1.1
libsoup
openSUSE:Leap 16.0
From an advisory covering 14 CVEs
 before 3.6.6-160000.5.1
3.6.6-160000.5.1

History

History
RecordedChangedSources
affectedOSV
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-12547 is a low vulnerability (CVSS 3.4) in Red Hat Enterprise Linux 10, published July 21, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in libsoup 2.74.2-25.oe2203sp4.

References

Show 66 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open