CVE-2026-66338

Microsoft · Published August 7, 2026

5.4

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked(). Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()

Affected Products

azl3 libsoup 3.4.4-16 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N/E:U