Security Advisory
CVE-2026-66339
6.5
MEDIUM
Vulnerability Description
A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.
Published Date
July 24, 2026
Official Source
NIST NVD Advisory