Lucene search
+L

254 matches found

SUSE CVE
SUSE CVE
added 2026/02/03 12:24 a.m.6 views

SUSE CVE-2026-1760

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

8.6CVSS5.4AI score0.00423EPSS
SaveExploits0References13
OSV
OSV
added 2026/02/02 2:16 p.m.8 views

AZL-77618 CVE-2026-1760 affecting package libsoup 3.0.4-12

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS5.7AI score0.00423EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/02 2:16 p.m.10 views

CVE-2026-1760

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS0.00423EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/02 2:16 p.m.7 views

AZL-77622 CVE-2026-1760 affecting package libsoup for versions less than 3.4.4-12

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS5.7AI score0.00423EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/02/02 2:16 p.m.7 views

CVE-2026-1760

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS6.1AI score0.00423EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/02 2:16 p.m.5 views

UBUNTU-CVE-2026-1760

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS6AI score0.00423EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/02 2:1 p.m.25 views

CVE-2026-1760

CVE-2026-1760 – SoupServer HTTP request smuggling . A flaw in SoupServer allows a remote unauthenticated attacker to smuggle additional requests over a persistent connection by exploiting combined Transfer-Encoding: chunked and Connection: keep-alive handling, potentially causing DoS. The vulnera...

5.3CVSS5.4AI score0.00423EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/02/02 2:1 p.m.5 views

EUVD-2026-5105

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS5.4AI score0.00423EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/02 2:1 p.m.5 views

CVE-2026-1760 Libsoup: soupserver: denial of service via http request smuggling

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS5.4AI score0.00423EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/02 2:1 p.m.7 views

CVE-2026-1760

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS5.4AI score0.00423EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/02 2:1 p.m.45 views

CVE-2026-1760 Libsoup: soupserver: denial of service via http request smuggling

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS0.00423EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/02/02 2:1 p.m.6 views

CVE-2026-1760

A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine Transfer-Encoding: chunked and Connection: keep-alive headers. A remote, unauthenticated client can exploit this by sending specially crafted requests,...

5.3CVSS5.1AI score0.00423EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/02 12:0 a.m.6 views

libsoup 环境问题漏洞

Libsoup is a GNOME project’s HTTP client/server library. Libsoup has an environmental issue vulnerability, which stems from improper handling of the Transfer-Encoding: chunked and Connection: keep-alive headers in SoupServer. This vulnerability may lead to HTTP requests carrying malicious...

5.3CVSS6AI score0.00423EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/26 10:16 a.m.9 views

CVE-2025-41082

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS0.00386EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/26 9:24 a.m.6 views

EUVD-2025-206375

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS5.9AI score0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/26 9:24 a.m.34 views

CVE-2025-41082 HTTP Request/Response Smuggling in Altitude Communication Server

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS0.00386EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/26 9:24 a.m.16 views

CVE-2025-41082

CVE-2025-41082 : Affected: Altitude Communication Server. vulnerability arises from inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers, causing desynchronization between frontend and backend servers. Potential effects include request h...

6.9CVSS5.9AI score0.00386EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/26 9:24 a.m.2 views

CVE-2025-41082

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS5.9AI score0.00386EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/26 12:0 a.m.8 views

Altitude Communication Server environmental issues vulnerability

Altitude Communication Server is an IP contact center software developed by the American company Altitude. There is a security vulnerability in Altitude Communication Server, which stems from inconsistent analysis of the Content-Length header for multiple HTTP requests within a single Keep-Alive...

6.9CVSS5.8AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.14 views

PT-2026-4738

Illegal HTTP request traffic vulnerability CL.0 in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which...

6.9CVSS5.9AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder