CyberICT

CVE-2026-3632

Microsoft · Published March 21, 2026

CVSS v3.1

INFO
Patch availableGet patch

Description

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames. Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

Affected Products

  • azl3 libsoup 3.4.4-12 on Azure Linux 3.0
  • cbl2 libsoup 3.0.4-12 on CBL Mariner 2.0
  • azl3 libsoup 3.4.4-14 on Azure Linux 3.0
  • cbl2 libsoup 3.0.4-13 on CBL Mariner 2.0

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L