CVE-2026-3633 is a reminder that the most dangerous bugs are not always memory corruptions or flashy remote code execution chains; sometimes they are one malformed string away from letting an attacker reshape an HTTP request. In libsoup, a remote attacker who controls the method parameter passed...