CVE-2026-2369

CVE-2026-2369 identifies an integer underflow vulnerability within the libsoup library, triggered when processing content with a zero-length resource, which results in a buffer overread. This flaw carries a Medium CVSS score of 6.5 and can be exploited remotely with low attack complexity and no user interaction. A successful exploit could lead to low impact on confidentiality by allowing access to sensitive information, or cause an application-level denial of service. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. However, the vulnerability has received some community discussion and media coverage, primarily through security advisories from vendors like SUSE, indicating that patches are being issued.