CVE-2026-66339
MEDIUM
6.5
CVSS Severity Score
Vulnerability Description
A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.
Affected Platforms (CPE)
No CPE configurations currently published for this record.