USN-8780-1: libsoup vulnerabilities
Ubuntu fixed three libsoup flaws enabling HTTP header injection via proxies and leakage of proxy credentials or request data.
USN-8780-1 patches three libsoup vulnerabilities: CVE-2026-1467, arbitrary HTTP header injection when handling certain URLs through an HTTP proxy; CVE-2026-1539, proxy authentication credentials not stripped when following redirects, exposing sensitive information; and CVE-2026-1801, disclosed by Ahmed Lekssays, sensitive information disclosure via incorrect parsing of certain HTTP requests. Remote attackers could potentially exploit all three issues.
- Header injection via mishandled proxy URLs (CVE-2026-1467).
- Proxy auth credentials retained across redirects (CVE-2026-1539).
- Malformed HTTP request parsing could leak sensitive data (CVE-2026-1801).
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-1467 | libsoup: This vulnerability, known as CRLF (Carriage Return Line Feed) Injection, occurs when an HTTP proxy is configured and the library… | 5.3 | <1% | PoC | |
| CVE-2026-1539 | A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations | 5.8 | <1% | ||
| CVE-2026-1801 | libsoup: This HTTP Request Smuggling vulnerability arises from non-RFC-compliant parsing in the soup_filter_input_stream_read_line()… | 6.5 | <1% |
From the original article
It was discovered that libsoup incorrectly handled certain URLs when using an HTTP proxy. A remote attacker could possibly use this issue to inject arbitrary HTTP headers. (CVE-2026-1467) It was discovered that libsoup did not remove proxy authentication credentials when following HTTP redirects.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.