CRLF injection in libsoup - CVE-2026-1536

Vulnerability identifier: #VU122660

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N]

CVE-ID: CVE-2026-1536

CWE-ID: CWE-93

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to inject arbitrary data in server response.

The vulnerability exists due to insufficient validation of attacker-supplied data. A remote attacker can pass specially crafted HTTP request ta to the application containing CR-LF characters and modify application behavior.

libsoup
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Basesystem Module
openSUSE Leap
Ubuntu
Anolis OS
openEuler
libsoup-devel-32bit
libsoup-3_0-0
libsoup-debugsource
libsoup-3_0-0-debuginfo
libsoup-devel
typelib-1_0-Soup-3_0
libsoup-lang
libsoup-3_0-0-32bit
libsoup-3_0-0-32bit-debuginfo
libsoup-3_0-0-64bit-debuginfo
libsoup-3_0-0-64bit
libsoup-devel-64bit
libsoup3 (Ubuntu package)
libsoup3
libsoup3-debuginfo
libsoup3-debugsource
libsoup3-devel
libsoup3-help
libsoup3-doc

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

libsoup-devel-32bit - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-3_0-0 - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-debugsource - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-3_0-0-debuginfo - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-devel - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
typelib-1_0-Soup-3_0 - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-lang - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-3_0-0-32bit - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-3_0-0-32bit-debuginfo - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-3_0-0-64bit-debuginfo - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-3_0-0-64bit - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup-devel-64bit - addressed in versions 3.0.4-150400.3.31.1, 3.4.4-150600.3.31.1
libsoup3 (Ubuntu package) - addressed in versions 3.0.7-0ubuntu1+esm7, 3.4.4-5ubuntu0.7, 3.6.5-4ubuntu0.2
libsoup3 - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3-debuginfo - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3-debugsource - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3-devel - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3-help - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3-doc - update to 3.6.5-9
libsoup3-devel - update to 3.6.5-9
libsoup3 - update to 3.6.5-9

• https://access.redhat.com/security/cve/CVE-2026-1536
• https://bugzilla.redhat.com/show_bug.cgi?id=2433834

• Multiple vulnerabilities in libsoup
• SUSE update for libsoup
• Ubuntu update for libsoup3
• SUSE update for libsoup
• Anolis OS update for libsoup3
• openEuler 24.03 LTS SP3 update for libsoup3
• openEuler 24.03 LTS SP1 update for libsoup3
• openEuler 24.03 LTS update for libsoup3