CVE-2026-2443
Medium
Description
A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Gnome Libsoup
PublishedFeb 13, 2026
First seenFeb 13, 2026
Weakness typeCWE-125Out-of-bounds read
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnome libsoup | No range specified | — |
| redhat enterprise_linux | 6.0, 7.0, 8.0, 9.0, 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.