There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the
    `soup_message_new()` function, could inject arbitrary headers and additional request data. This
    vulnerability, known as CRLF (Carriage Return Line Feed) injection, occurs because the method value is not
    properly escaped during request line construction, potentially leading to HTTP request injection.
    (CVE-2026-3633)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 libsoup 中發現缺陷。遠端攻擊者透過控制「soup_message_new（）」函式的方法參數，可以注入任意標頭和其他請求資料。此漏洞稱為 CRLF（回車換行）插入，是因為在請求行建構過程中方法值未正確逸出，可能導致 HTTP 請求插入。
    (CVE-2026-3633)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 libsoup 中发现一个缺陷。远程攻击者通过控制“soup_message_new（）”函数的方法参数，可注入任意标头和附加请求数据。此漏洞称为 CRLF（回车换行）注入，是由于在请求行构造过程中方法值未正确转义，可能导致 HTTP 请求注入。
    (CVE-2026-3633)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - libsoup に欠陥が見つかりました。リモートの攻撃者が、「soup_message_new()」関数のメソッドパラメーターを制御することにより、任意のヘッダーと追加のリクエストデータを注入する可能性があります。CRLF(復帰改行)インジェクションとして知られるこの脆弱性は、リクエストライン構築中にメソッド値が適切にエスケープされないために発生し、HTTP リクエストインジェクションを引き起こす可能性があります。
    (CVE-2026-3633)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f06a7887af advisory.

    Fixes a few CVEs:

    - CVE-2026-102560
    - CVE-2026-102559
    - CVE-2026-102558
    - CVE-2026-102555
    - CVE-2026-102556
    - CVE-2026-102557
    - CVE-2026-85197
    - CVE-2026-103399
    - CVE-2026-85534
    - CVE-2026-3633
    - CVE-2026-3099

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142315 advisory.

    A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the     `soup_message_new()` function, could inject arbitrary headers and additional request data. This     vulnerability, known as CRLF (Carriage Return Line Feed) injection, occurs because the method value is not     properly escaped during request line construction, potentially leading to HTTP request injection.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the     `soup_message_new()` function, could inject arbitrary headers and additional request data. This     vulnerability, known as CRLF (Carriage Return Line Feed) injection, occurs because the method value is not     properly escaped during request line construction, potentially leading to HTTP request injection.
    (CVE-2026-3633)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
478240	Echo: libsoup3: security update to 3.8.0-1	Tenable Self-Hosted Container Security	Echo Local Security Checks	11/3/2026	11/3/2026	medium
478240	Echo: libsoup3: security update to 3.8.0-1	Tenable Cloud Security	Echo Local Security Checks	11/3/2026	11/3/2026	medium
301506	Linux Distros 未修補的弱點：CVE-2026-3633	Nessus	Misc.	3/9/2026	11/6/2026	medium
301506	Linux Distros 未修补的漏洞：CVE-2026-3633	Nessus	Misc.	3/9/2026	11/6/2026	medium
301506	Linux Distros のパッチ未適用の脆弱性: CVE-2026-3633	Nessus	Misc.	3/9/2026	11/6/2026	medium
375405	Fedora 44 : libsoup3 (2026-f06a7887af)	Nessus	Fedora Local Security Checks	11/3/2026	11/3/2026	critical
370010	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libsoup (UTSA-2026-142315)	Nessus	Unity Linux Local Security Checks	10/21/2026	10/21/2026	medium
301506	Linux Distros Unpatched Vulnerability : CVE-2026-3633	Nessus	Misc.	3/9/2026	11/6/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

critical

medium

medium