CVE-2026-5119 in GNOME libsoup
Sumário (Inglês)
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.
Responsável
redhat
Reservar
30/03/2026
Divulgação
30/03/2026
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354152 | GNOME libsoup HTTP Proxy Encriptação fraca | 319 | Não definido | Não definido | CVE-2026-5119 |