CVE-2026-5119 in GNOME libsoup
Сводка (Английский)
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.
Ответственный
redhat
Резервировать
30.03.2026
Раскрытие
30.03.2026
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354152 | GNOME libsoup HTTP Proxy слабое шифрование | 319 | Не определено | Не определено | CVE-2026-5119 |