A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed (CRLF) sequence due to improper input sanitization in the `soup_message_headers_set_content_type()` function. This vulnerability allows for the injection of arbitrary header-value pairs, potentially leading to HTTP header injection and response splitting attacks.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f06a7887af advisory.

    Fixes a few CVEs:

    - CVE-2026-102560
    - CVE-2026-102559
    - CVE-2026-102558
    - CVE-2026-102555
    - CVE-2026-102556
    - CVE-2026-102557
    - CVE-2026-85197
    - CVE-2026-103399
    - CVE-2026-85534
    - CVE-2026-3633
    - CVE-2026-3099

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can
    inject a Carriage Return Line Feed (CRLF) sequence due to improper input sanitization in the
    `soup_message_headers_set_content_type()` function. This vulnerability allows for the injection of
    arbitrary header-value pairs, potentially leading to HTTP header injection and response splitting attacks.
    (CVE-2026-3634)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can     inject a Carriage Return Line Feed (CRLF) sequence due to improper input sanitization in the     `soup_message_headers_set_content_type()` function. This vulnerability allows for the injection of     arbitrary header-value pairs, potentially leading to HTTP header injection and response splitting attacks.
    (CVE-2026-3634)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
375405	Fedora 44 : libsoup3 (2026-f06a7887af)	Nessus	Fedora Local Security Checks	Local	critical
465310	Echo: libsoup3: security update to 3.6.6-1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
465310	Echo: libsoup3: security update to 3.6.6-1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
301504	Linux Distros Unpatched Vulnerability : CVE-2026-3634	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-3634

medium

Tenable Plugins

critical

medium

medium

medium