CVE-2026-2708

Vulnerability

CVE-2026-2708

libsoup: libsoup: HTTP Request Smuggling via Duplicate Content-Length Headers

ecosystem: redhat:6, redhat:7, redhat:8, redhat:9, redhat:10

No description is available for this CVE.

References

secalert@redhat.com: https://access.redhat.com/security/cve/CVE-2026-2708
secalert@redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2440743
secalert@redhat.com: https://nvd.nist.gov/vuln/detail/CVE-2026-2708
secalert@redhat.com: https://www.cve.org/CVERecord?id=CVE-2026-2708

severityL

Low

type: vendor

source: secalert@redhat.com

CVSS3.1

3.7LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

AV	Network
AC	High
PR	None
UI	None
S	Not Changed
C	None
I	Low
A	None

source: secalert@redhat.com

　CWE

CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

source: secalert@redhat.com

published: 2026-02-18 20:13:57

modified: 2026-02-19 16:57:58

Detection

redhat:10

CVE-2026-2708

redhat-vex

OR

unfixedUnder investigation

libsoup3

package type: binary

type: version

unfixedUnder investigation

libsoup3-devel

package type: binary

type: version

unfixedUnder investigation

libsoup3-doc

package type: binary

type: version

unfixedUnder investigation

libsoup3

package type: source

type: version

tag: rhel-10:d927fec7-2aaa-ffbd-ee12-ef9277d5e9c8

redhat:6

CVE-2026-2708

redhat-vex

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-6-els:7cf729e1-4caa-1316-d070-5f07011823b8

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-6-extras-including-unpatched:7cf729e1-4caa-1316-d070-5f07011823b8

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-6-including-unpatched:7cf729e1-4caa-1316-d070-5f07011823b8

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-6-supplementary:7cf729e1-4caa-1316-d070-5f07011823b8

redhat:7

CVE-2026-2708

redhat-vex

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-7-extras-including-unpatched:8814c35d-6965-1fb9-9d76-6792876a176d

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-7-including-unpatched:8814c35d-6965-1fb9-9d76-6792876a176d

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-7-supplementary:8814c35d-6965-1fb9-9d76-6792876a176d

redhat:8

CVE-2026-2708

redhat-vex

OR

unfixedUnder investigation

libsoup

package type: binary

type: version

unfixedUnder investigation

libsoup-devel

package type: binary

type: version

unfixedUnder investigation

libsoup

package type: source

type: version

tag: rhel-8-including-unpatched:cb9fa898-b85c-12cd-afbf-2a4f72047ce2

redhat:9

CVE-2026-2708

redhat-vex

OR

unfixedUnder investigation

libsoup

package type: binary

type: version

unfixedUnder investigation

libsoup-devel

package type: binary

type: version

unfixedUnder investigation

libsoup

package type: source

type: version

tag: rhel-9-including-unpatched:cd80fea4-e5e1-35f5-4307-071d865ae347

Data Sources

RedHat Enterprise Linux CSAF VEX
redhat-vex