A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a
    zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access
    sensitive information or cause an application level denial of service. (CVE-2026-2369)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778944149 advisory.

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service. (CVE-2026-2369)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777569045 advisory.

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service. (CVE-2026-2369)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777659767 advisory.

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service. (CVE-2026-2369)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777659767 advisory.

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service. (CVE-2026-2369)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has libsoup packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service. (CVE-2026-2369)

  - GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at     the end of header names are ignored, i.e., a Transfer-Encoding\0: chunked header is treated the same as     a Transfer-Encoding: chunked header. (CVE-2024-52530)

  - A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and     other applications for web communication. When processing cookies with specially crafted expiration dates,     the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of     memory contents, potentially exposing sensitive information from the process using libsoup.
    (CVE-2025-11021)

  - A flaw in libsoup's HTTP header handling allows multiple Host: headers in a request and returns the last     occurrence for server-side processing. Common front proxies often honor the first Host: header, so this     mismatch can cause vhost confusion where a proxy routes a request to one backend but the backend     interprets it as destined for another host. This discrepancy enables request-smuggling style attacks,     cache poisoning, or bypassing host-based access controls when an attacker supplies duplicate Host headers.
    (CVE-2025-14523)

  - A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content     via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to     a crafted HTTP response by an HTTP server. (CVE-2025-2784)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8523-1 advisory.

    Eric Su and Samuel Dainard discovered that libsoup incorrectly handled content with zero-length resources.
    An attacker could possibly use this issue to trigger a buffer over-read, resulting in information     disclosure or a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu     22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-2369)

    Kona Arctic discovered that libsoup did not properly protect sensitive cookies when establishing HTTPS     tunnels through an HTTP proxy. An attacker could possibly use this issue to intercept session cookies,     resulting in session hijacking or user impersonation. (CVE-2026-5119)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vulnerability     arises from non-RFC-compliant parsing in the soup_filter_input_stream_read_line() logic, where libsoup     accepts malformed chunk headers, such as lone line feed (LF) characters instead of the required carriage     return and line feed (CRLF). A remote attacker can exploit this without authentication or user interaction     by sending specially crafted chunked requests. This allows libsoup to parse and process multiple HTTP     requests from a single network message, potentially leading to information disclosure.(CVE-2026-1801)

    A flaw was found in libsoup's WebSocket frame processing when handling incoming messages. If a non-default     configuration is used where the maximum incoming payload size is unset, the library may read memory     outside the intended bounds. This can cause unintended memory exposure or a crash. Applications using     libsoup's WebSocket support with this configuration may be impacted.(CVE-2026-0716)

    A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing     specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In     certain build configurations, this could allow a remote attacker to access portions of server memory     beyond the intended response. Exploitation requires a vulnerable configuration and access to a server     using the embedded SoupServer component.(CVE-2026-2443)

    A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service.(CVE-2026-2369)

Tenable has extracted the preceding description block directly from the EulerOS libsoup security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20354-1 advisory.

    - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422).
    - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (bsc#1254876).
    - CVE-2025-32049: Denial of Service attack to websocket server (bsc#1240751).
    - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
    - CVE-2026-0719: stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution     (bsc#1256399).
    - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests     (bsc#1257398).
    - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header when handling     HTTP redirects       (bsc#1257441).
    - CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to     HTTP request       smuggling and potential DoS (bsc#1257597).
    - CVE-2026-2369: Buffer overread due to integer underflow when handling zero-length resources     (bsc#1258120).
    - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap     information       disclosure to remote attackers (bsc#1258170).
    - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0834-1 advisory.

    - CVE-2025-32049: denial of service attack to websocket server (bsc#1240751).
    - CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests     (bsc#1257398).
    - CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header when handling     HTTP redirects       (bsc#1257441).
    - CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to     HTTP request       smuggling and potential DoS (bsc#1257597).
    - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources     (bsc#1258120).
    - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap     information       disclosure to remote attackers (bsc#1258170).
    - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1460 advisory.

    A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can     inject CRLF (Carriage Return Line Feed) sequences into the header value. These sequences are then     interpreted verbatim when the HTTP request or response is constructed, allowing arbitrary HTTP headers to     be injected. This vulnerability can lead to HTTP header injection or HTTP response splitting without     requiring authentication or user interaction. (CVE-2026-1536)

    A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to     unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does     not remove the Proxy-Authorization header if the request is redirected to a different host. As a result,     sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP     communication may unintentionally expose proxy authentication data. (CVE-2026-1539)

    libsoup: heap buffer overflow in soup_content_sniffer_sniff (CVE-2026-2369)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0703-1 advisory.

    - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
    - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422).
    - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751).
    - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources     (bsc#1258120).
    - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap     information       disclosure to remote attackers (bsc#1258170).
    - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0657-1 advisory.

    - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751).
    - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources     (bsc#1258120).
    - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap     information       disclosure to remote attackers (bsc#1258170).
    - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0690-1 advisory.

    - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751).
    - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources     (bsc#1258120).
    - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap     information       disclosure to remote attackers (bsc#1258170).
    - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0689-1 advisory.

    - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751).
    - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources     (bsc#1258120).
    - CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap     information       disclosure to remote attackers (bsc#1258170).
    - CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a     zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access     sensitive information or cause an application level denial of service. (CVE-2026-2369)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
465520	Echo: libsoup3: security update to 3.6.6-1	Tenable Cloud Security	Echo Local Security Checks	Local	critical
465520	Echo: libsoup3: security update to 3.6.6-1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
361951	CentOS Linux 7 [TuxCare] Security Update: libsoup / libsoup-devel (CENTOS7:CLSA-2026:1778944149)	Nessus	CentOS Local Security Checks	Local	critical
359917	AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.2:CLSA-2026:1777569045)	Nessus	Alma Linux Local Security Checks	Local	critical
352672	Rocky Linux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.6:CLSA-2026:1777659767)	Nessus	Rocky Linux Local Security Checks	Local	critical
352473	AlmaLinux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.6:CLSA-2026:1777659767)	Nessus	Alma Linux Local Security Checks	Local	critical
343555	NewStart CGSL MAIN 7.02 : libsoup Multiple Vulnerabilities (NS-SA-2026-0100)	Nessus	NewStart CGSL Local Security Checks	Local	high
326252	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libsoup vulnerabilities (USN-8523-1)	Nessus	Ubuntu Local Security Checks	Local	critical
319965	EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-2213)	Nessus	Huawei Local Security Checks	Local	critical
319941	EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-2251)	Nessus	Huawei Local Security Checks	Local	critical
302341	openSUSE 16 Security Update : libsoup2 (openSUSE-SU-2026:20354-1)	Nessus	SuSE Local Security Checks	Local	high
301458	SUSE SLES15 Security Update : libsoup2 (SUSE-SU-2026:0834-1)	Nessus	SuSE Local Security Checks	Local	medium
301358	Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2026-1460)	Nessus	Amazon Linux Local Security Checks	Local	medium
300651	SUSE SLES12 Security Update : libsoup (SUSE-SU-2026:0703-1)	Nessus	SuSE Local Security Checks	Local	medium
300582	SUSE SLED15: libsoup-2_4-1 / libsoup-2_4-1-32bit / libsoup2-devel / etc (SUSE-SU-2026:0657-1)	Nessus	SuSE Local Security Checks	Local	critical
300249	SUSE SLED15: libsoup-3_0-0 / libsoup-3_0-0-32bit / libsoup-devel / etc (SUSE-SU-2026:0690-1)	Nessus	SuSE Local Security Checks	Local	critical
300248	SUSE SLES15 Security Update : libsoup (SUSE-SU-2026:0689-1)	Nessus	SuSE Local Security Checks	Local	medium
298801	Linux Distros Unpatched Vulnerability : CVE-2026-2369	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2026-2369

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

high

critical

critical

critical

high

medium

medium

medium

critical

critical

medium

critical