CVE-2026-103399

A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...

CVE-2026-103399 Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body

A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...

CVE-2026-103399 Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body

A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...

CVE-2026-103399

A vulnerability exists in SoupServer (libsoup) where an HTTP/1.x client sending a request with Expect: 100-continue and a request body can trigger request smuggling . If the server returns an early final (non-1xx) response before reading the body, it fails to drain the bytes or close the connecti...

Linux Distros Unpatched Vulnerability : CVE-2026-103399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early...

PT-2026-103492

Name of the Vulnerable Software and Affected Versions SoupServer libsoup affected versions not specified Description An issue exists where SoupServer fails to drain declared body bytes or close the connection when an HTTP/1.x client sends a request containing a request body and the Expect:...

EUVD-2026-78884

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests...

ROS-20260915-73-0131

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the X server’s request handling. A non-zero value for “bytes to ignore” in a client’s request can cause the server to skip processing another client’s request, potentially leading to a denial of service...

ROS-20260911-73-0119

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260910-73-0147

The vulnerability in Chromium is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260910-73-0092

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260909-73-0078

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests

A flaw was found in the Linux kernel's pcrypt component. This vulnerability involves how the system handles certain requests, specifically MAYBACKLOG requests, which can indicate a temporary busy state. If not properly managed, the system's processing of these requests could lead to resource...

UBUNTU-CVE-2026-85152

undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool. Because the internal cache key falls back to an empty origin string, a cacheable or in-flight response from one upstream...

CVE-2026-84645

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

WebNN Component Confidential Data Access

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

EUVD-2026-68615

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...

CVE-2026-21827

HCL Connections is affected by an information disclosure vulnerability caused by improper handling of request data , potentially allowing a user to obtain sensitive information they are not entitled to access. The CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexi...

CVE-2026-21827 HCL Connections is vulnerable to an information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...