CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.9. It may be remotely exploitable.
CVE
CVE-2026-3633
Severity
LOW
CVSS
3.9
EPSS
0.22%
Original NVD Description
A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the `soup_message_new()` function, could inject arbitrary headers and additional request data. This vulnerability, known as CRLF (Carriage Return Line Feed) injection, occurs because the method value is not properly escaped during request line construction, potentially leading to HTTP request injection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)