cve-2026-2436

  1. libsoup CVE-2026-2436 Use-After-Free Crash in TLS Disconnects

    A fresh libsoup flaw tracked as CVE-2026-2436 is a reminder that even mature HTTP libraries can fail in ways that look small on paper but matter greatly in production. According to the public record, a remote attacker can trigger a use-after-free in SoupServer when soup_server_disconnect() frees...