Threats Tagged 'cve-2026-66338'
View all threats tagged with 'cve-2026-66338'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-66338'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability in libsoup's chunked transfer encoding parser allows permissive parsing of chunk sizes that violate RFC 9112. This flaw can lead to HTTP request smuggling when libsoup is used behind a strict frontend proxy. The parser accepts chunk sizes with leading whitespace, plus sign prefixes, and trailing invalid characters. The practical impact is limited because libsoup servers are rarely deployed in internet-facing roles behind reverse proxies. The vulnerability has a CVSS score of 7.2, indicating a medium severity level. Join the discussion | GCVE Database | 07/24/2026, 23:16:00 UTC Added: 07/25/2026, 23:09:09 UTC |
0 A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including leading whitespace, plus sign prefixes, and trailing invalid characters. When libsoup operates behind a strict frontend proxy, this parsing differential can be exploited to smuggle HTTP requests. Join the discussion | CVE Database V5 | 07/24/2026, 23:01:20 UTC Added: 07/24/2026, 23:22:46 UTC |
Showing 1 to 2 of 2 results