CVE-2026-5119 in GNOME libsoupinfo

Zusammenfassung (Englisch)

A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.

Zuständig

redhat

Reservieren

30.03.2026

Veröffentlichung

30.03.2026

Einträge

VulDB provides additional information and datapoints for this CVE:

IDSchwachstelleCWEAusMasCVE
354152GNOME libsoup HTTP Proxy schwache Verschlüsselung319Nicht definiertNicht definiertCVE-2026-5119

Beschreibung

CPE

CWE

CVSS

Exploits

History

Diff

Verknüpfen

Threat Intelligence

API JSON

API XML

API CSV

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!