CyberRota
← Ana sayfaya dön

CVE-2026-2708

LOW · CVSS 3.7 EPSS %0.03

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-04-23T22:16:29.233 · Çekilme zamanı: 2026-05-23T18:01:01.351695+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-2708
Severity
LOW
CVSS
3.7
EPSS
%0.03

Orijinal NVD Açıklaması

A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values.