Server-Side Authentication Flaw in Libsoup Affects Users
CVE-2026-3099
5.8MEDIUM
What is CVE-2026-3099?
A security flaw in the Libsoup library involves the server-side digest authentication within the SoupAuthDomainDigest class, which fails to properly track issued nonces. This oversight results in the inability to enforce nonce-count increments. As a consequence, a remote attacker may capture a valid authentication header and utilize it repeatedly to impersonate a legitimate user, thereby gaining unauthorized access to secured resources without proper authentication checks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Cavid for reporting this issue.