CVE-2026-3099

Vulnerability

CVE-2026-3099

libsoup: Libsoup: Authentication bypass via digest authentication replay attack

ecosystem: redhat:6, redhat:7, redhat:8, redhat:9, redhat:10

No description is available for this CVE.

References

secalert@redhat.com: https://access.redhat.com/security/cve/CVE-2026-3099
secalert@redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2442232
secalert@redhat.com: https://nvd.nist.gov/vuln/detail/CVE-2026-3099
secalert@redhat.com: https://www.cve.org/CVERecord?id=CVE-2026-3099

severityM

Moderate

type: vendor

source: secalert@redhat.com

CVSS3.1

5.8MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

AV	Network
AC	High
PR	None
UI	Required
S	Changed
C	Low
I	Low
A	Low

source: secalert@redhat.com

　CWE

CWE-323

Reusing a Nonce, Key Pair in Encryption

source: secalert@redhat.com

published: 2026-02-24 01:01:00

modified: 2026-02-24 07:53:36

Detection

redhat:10

CVE-2026-3099

redhat-vex

OR

unfixedFix deferred

libsoup3

package type: binary

type: version

unfixedFix deferred

libsoup3-devel

package type: binary

type: version

unfixedFix deferred

libsoup3-doc

package type: binary

type: version

unfixedFix deferred

libsoup3

package type: source

type: version

tag: rhel-10:d927fec7-2aaa-ffbd-ee12-ef9277d5e9c8

redhat:6

CVE-2026-3099

redhat-vex

OR

unfixedOut of support scope

libsoup

package type: binary

type: version

unfixedOut of support scope

libsoup-devel

package type: binary

type: version

unfixedOut of support scope

libsoup

package type: source

type: version

tag: rhel-6-els:7cf729e1-4caa-1316-d070-5f07011823b8

OR

unfixedOut of support scope

libsoup

package type: binary

type: version

unfixedOut of support scope

libsoup-devel

package type: binary

type: version

unfixedOut of support scope

libsoup

package type: source

type: version

tag: rhel-6-extras-including-unpatched:7cf729e1-4caa-1316-d070-5f07011823b8

OR

unfixedOut of support scope

libsoup

package type: binary

type: version

unfixedOut of support scope

libsoup-devel

package type: binary

type: version

unfixedOut of support scope

libsoup

package type: source

type: version

tag: rhel-6-including-unpatched:7cf729e1-4caa-1316-d070-5f07011823b8

OR

unfixedOut of support scope

libsoup

package type: binary

type: version

unfixedOut of support scope

libsoup-devel

package type: binary

type: version

unfixedOut of support scope

libsoup

package type: source

type: version

tag: rhel-6-supplementary:7cf729e1-4caa-1316-d070-5f07011823b8

redhat:7

CVE-2026-3099

redhat-vex

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-7-extras-including-unpatched:8814c35d-6965-1fb9-9d76-6792876a176d

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-7-including-unpatched:8814c35d-6965-1fb9-9d76-6792876a176d

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-7-supplementary:8814c35d-6965-1fb9-9d76-6792876a176d

redhat:8

CVE-2026-3099

redhat-vex

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-8-including-unpatched:cb9fa898-b85c-12cd-afbf-2a4f72047ce2

redhat:9

CVE-2026-3099

redhat-vex

OR

unfixedFix deferred

libsoup

package type: binary

type: version

unfixedFix deferred

libsoup-devel

package type: binary

type: version

unfixedFix deferred

libsoup

package type: source

type: version

tag: rhel-9-including-unpatched:cd80fea4-e5e1-35f5-4307-071d865ae347

Data Sources

RedHat Enterprise Linux CSAF VEX
redhat-vex