CVE-2026-66339
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Jul 24, 2026
Vendor
unknown
Description
A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.