Ubuntu 25.10 libsoup3 Denial of Service Vulnerabilities Identified

Ubuntu 25.10 libsoup3 Denial of Service Vulnerabilities Identified

First seen 10 Feb 2026, 12:26 UTC UbuntuLinuxsecurity 28.7

Article Content

Browse articles
ThreatCluster

Multiple security vulnerabilities have been discovered in libsoup, affecting Ubuntu 25.10, 24.04 LTS, and 22.04 LTS. These vulnerabilities could allow remote attackers to cause a denial of service or execute arbitrary code through improper handling of URL-decoded input and the Proxy-Authorization header. Key CVEs include CVE-2026-1467, CVE-2026-1536, and CVE-2026-1539.

Timeline

2026-01-27
CVE-2026-1467 published
2026-01-28
CVE-2026-1536 published
2026-01-28
CVE-2026-1539 published
2026-02-08
Ubuntu article published detailing libsoup vulnerabilities
2026-02-09
Linuxsecurity article published on libsoup threat