The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2410 advisory.

    Libsoup is an HTTP library implementation in C. It was originally part of a SOAP (Simple Object Access     Protocol) implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate     packages.  libsoup uses the Glib main loop and is designed to work well with GTK applications. This     enables GNOME applications to access HTTP servers on the network in a completely asynchronous fashion,     very similar to the Gtk+ programming model (a synchronous operation mode is also supported for those who     want it), but the SOAP parts were removed long ago.

    Security Fix(es):

    * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response     (CVE-2026-1761)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0095 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-1761:
    A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of     multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by     sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may     result in application crashes or arbitrary code execution in applications that process untrusted server     responses, and it does not require authentication or user interaction.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1758 advisory.

    OOB Read via Integer Overflow on libsoup through libsoup/websocket/soup-websocket-connection.c via     process_frame() leads to Undefined Behavior (CVE-2026-0716)

    A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return     Line Feed) Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-     decoded input used to create the Host header. A remote attacker can exploit this by providing a specially     crafted URL containing CRLF sequences, allowing them to inject additional HTTP headers or complete HTTP     request bodies. This can lead to unintended or unauthorized HTTP requests being forwarded by the proxy,     potentially impacting downstream services. (CVE-2026-1467)

    A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer     improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A     remote, unauthenticated client can exploit this by sending specially crafted requests, causing SoupServer     to fail to close the connection as required by RFC 9112. This allows the attacker to smuggle additional     requests over the persistent connection, leading to unintended request processing and potential denial-of-     service (DoS) conditions. (CVE-2026-1760)

    A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of     multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by     sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may     result in application crashes or arbitrary code execution in applications that process untrusted server     responses, and it does not require authentication or user interaction. (CVE-2026-1761)

    A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vulnerability     arises from non-RFC-compliant parsing in the soup_filter_input_stream_read_line() logic, where libsoup     accepts malformed chunk headers, such as lone line feed (LF) characters instead of the required carriage     return and line feed (CRLF). A remote attacker can exploit this without authentication or user interaction     by sending specially crafted chunked requests. This allows libsoup to parse and process multiple HTTP     requests from a single network message, potentially leading to information disclosure. (CVE-2026-1801)

    A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive     session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned     attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or     user impersonation. (CVE-2026-5119)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of     multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by     sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may     result in application crashes or arbitrary code execution in applications that process untrusted server     responses, and it does not require authentication or user interaction. (CVE-2026-1761)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2007 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM     Authentication (CVE-2026-0719)

    * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response     (CVE-2026-1761)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2215 advisory.

    * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM     Authentication (CVE-2026-0719)
      * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response     (CVE-2026-1761)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:2214 advisory.

    * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM     Authentication (CVE-2026-0719)

    * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response     (CVE-2026-1761)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007295 advisory.

    A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of     multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by     sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may     result in application crashes or arbitrary code execution in applications that process untrusted server     responses, and it does not require authentication or user interaction.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_2214 advisory.

    * libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM     Authentication (CVE-2026-0719)

    * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response     (CVE-2026-1761)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20186-1 advisory.

    - CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition     header       (bsc#1257440).
    - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP responses can lead to a     stack-based       buffer overflow (bsc#1257598).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:2410 advisory.

    * libsoup: Stack-Based Buffer Overflow in libsoup Multipart Response Parsingmultipart HTTP response     (CVE-2026-1761)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771602192 advisory.

  - A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and     other applications for network communication. When processing extremely long passwords, an internal size     calculation can overflow due to improper use of signed integers. This results in incorrect memory     allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may     crash unexpectedly, creating a denial-of-service risk. (CVE-2026-0719)

  - A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of     multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by     sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may     result in application crashes or arbitrary code execution in applications that process untrusted server     responses, and it does not require authentication or user interaction. (CVE-2026-1761)

  - A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until()     function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can     exploit this by sending a crafted multipart response, potentially causing the client application to crash     or disclose sensitive heap memory. (CVE-2026-66337)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1756 advisory.

    This advisory aggregates security fixes for the libsoup SRPM in CIQ LTS 8.6. It addresses 11 CVEs:
    CVE-2025-32049, CVE-2026-15711, CVE-2025-32906, CVE-2026-1761, CVE-2025-4948, and 6 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
298537	RHEL 10 : libsoup3 (RHSA-2026:2410)	Nessus	Red Hat Local Security Checks	2026/2/10	2026/2/24	high
300284	TencentOS Server 4: libsoup (TSSA-2026:0095)	Nessus	Tencent Local Security Checks	2026/3/2	2026/3/2	high
316949	Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2026-1758)	Nessus	Amazon Linux Local Security Checks	2026/5/27	2026/5/27	high
297573	Linux Distros Unpatched Vulnerability : CVE-2026-1761	Nessus	Misc.	2026/2/2	2026/10/31	high
297988	RHEL 9 : libsoup (RHSA-2026:2007)	Nessus	Red Hat Local Security Checks	2026/2/5	2026/2/24	high
298505	AlmaLinux 8 : libsoup (ALSA-2026:2215)	Nessus	Alma Linux Local Security Checks	2026/2/10	2026/2/24	high
298616	RockyLinux 8 : spice-client-win (RLSA-2026:2214)	Nessus	Rocky Linux Local Security Checks	2026/2/11	2026/2/11	high
306975	Unity Linux 20.1070a Security Update: libsoup (UTSA-2026-007295)	Nessus	Unity Linux Local Security Checks	2026/4/17	2026/4/17	high
354788	Rocky Linux 8 [CIQ] Security Update: spice-client-win-x64 / spice-client-win-x86 Multiple Vulnerabilities (crlsa-2026_2214)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
298722	openSUSE 16 Security Update : libsoup (openSUSE-SU-2026:20186-1)	Nessus	SuSE Local Security Checks	2026/2/12	2026/3/26	medium
298795	AlmaLinux 10 : libsoup3 (ALSA-2026:2410)	Nessus	Alma Linux Local Security Checks	2026/2/12	2026/4/21	high
360887	AlmaLinux 9.6 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1771602192)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	high
376425	Rocky Linux 8.6 [CIQ] Security Update: libsoup / libsoup-devel Multiple Vulnerabilities (ciqsa-2026_1756)	Nessus	Rocky Linux Local Security Checks	2026/11/5	2026/11/5	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

medium

high

high

high