CVE detail
CVE-2026-3633
A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function, could inject arbitrary headers and additional request data. This vulnerability, known as CRLF (Carriage Return Line Feed) injection, occurs because the method value is not properly escaped during request line construction, potentially leading to HTTP request injection.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 1
- within the 30d window
- Peak daily
- 1
- highest bucket
Evidence
Source links by recency
4 source links · newest first
Information published.
vendormsrc.microsoft.comJun 28, 2026, 9:01 AM- https://gitlab.gnome.org/GNOME/libsoup/-/issues/484gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgMar 17, 2026, 10:16 AM - https://bugzilla.redhat.com/show_bug.cgi?id=2445128bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMar 17, 2026, 10:16 AM - https://access.redhat.com/security/cve/CVE-2026-3633access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 17, 2026, 10:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-3634CVSS 3.9 · Low
A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed (CRLF) sequence due to improper input san…
- CVE-2026-1536CVSS 5.8 · Medium
A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can inject CRLF (Carriage Return Line Feed) sequences into the header value.…
- CVE-2026-1467CVSS 5.8 · Medium
A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the libra…
- CVE-2019-9741CVSS 6.1 · Medium
An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest wi…
- CVE-2016-4993CVSS 6.1 · Medium
CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers…
- CVE-2026-12549CVSS 4.8 · Medium
The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request…