NTLM Authentication Flaw in Libsoup HTTP Library Impacting GNOME Applications
CVE-2026-0719

8.6HIGH

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions
Vendor: CVE Published:; 8 January 2026

What is CVE-2026-0719?

A vulnerability has been discovered in the NTLM authentication handling within the libsoup HTTP library, which is utilized by GNOME and various other applications for network interactions. This flaw arises when the library processes overly long passwords, leading to an internal size calculation overflow due to the incorrect handling of signed integers. Consequently, this overflow may cause improper memory allocation on the stack, resulting in unsafe memory copying. Applications that rely on libsoup could experience unexpected crashes, thus creating a potential denial-of-service condition.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch