Is CVE-2026-1761 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-1761 being exploited in the wild.

How severe is CVE-2026-1761?

High severity, with a CVSS score of 8.6, published 2 February 2026.

Is there a fix for CVE-2026-1761?

A patch was published on 2026-02-04: Red Hat released initial security updates (RHSA-2026:1948) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-1761 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-1761?

Check whether you run Gnome Libsoup at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-1761: GNOME libsoup stack-based buffer overflow in multipart response parsing

CVE-2026-1761 · Severity: high · CVSS 8.6 · Published 2026-02-02

A security vulnerability has been identified in libsoup, a widely used library that allows applications to communicate over the internet. By sending a specially crafted response, an attacker could cause the application to crash or potentially take control of the affected system. This issue is particularly serious because it can be triggered remotely without any user interaction or login credentials.

Technologies: Gnome Libsoup. Vendors: Gnome.

Quick answers

Is CVE-2026-1761 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-1761 being exploited in the wild.
How severe is CVE-2026-1761?: High severity, with a CVSS score of 8.6, published 2 February 2026.
Which products and versions are affected?: Gnome Libsoup 2.62.3, 2.72.0.
Is there a fix for CVE-2026-1761?: A patch was published on 2026-02-04: Red Hat released initial security updates (RHSA-2026:1948) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-1761 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-1761?: Check whether you run Gnome Libsoup at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow (CWE-121) exists in libsoup due to an incorrect length calculation during the parsing of multipart HTTP responses. The vulnerability is located in the component responsible for handling multipart data streams. A remote, unauthenticated attacker can exploit this by serving a specially crafted multipart HTTP response to a client application using the vulnerable library. Successful exploitation can lead to memory corruption, resulting in a Denial of Service (DoS) or potential arbitrary code execution (ACE). Red Hat has released several security advisories (e.g., RHSA-2026:1948, RHSA-2026:2005) providing patched versions for various Enterprise Linux releases.

Affected products

GNOME libsoup 2.62.3, 2.72.0
Red Hat Red Hat Enterprise Linux 7, 8, 9, 10

Timeline

2026-02-02: disclosed
2026-02-04: patched: Red Hat released initial security updates (RHSA-2026:1948)

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.