CVE-2026-85534

Vendor

Canonical

Product

Ubuntu

CVSS

5.9

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   Ubuntu notice Ubuntu 10d ago

   libsoup vulnerabilities

   USN-8890-1 fixed vulnerabilities in libsoup. This update provides the corresponding updates for libsoup3 on Ubuntu 26.10. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A…

   CVE-2026-4271CVE-2026-5119CVE-2026-6324+5 more Canonical
2. 3
   CVE NVD 4 Sep 2026

   A flaw was found in libsoup.

   A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollable input stream, the library can buffer more data than the current flow-control window later allows. A malicious HTTP/2 server can shrink…

   CVSS 5.9 CVE-2026-85534