CVE-2026-103399
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
71/100
Published: 2026-09-30
Modified: 2026-11-05
First seen: 2026-11-03
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
Low
A:
None
Description
A flaw was found in SoupServer (libsoup). When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final (non-1xx) response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-alive connection, those leftover bytes are interpreted as a subsequent HTTP request. A remote, unauthenticated attacker can place a complete HTTP request in the body and cause SoupServer to process that smuggled request, leading to unintended request handling.
Weakness Classification (1)
References & Advisories (2)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT