{"schema":"vulnpedia.research/1","cve":"CVE-2026-77680","references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-32907","tags":["technical-description","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","url":"https://access.redhat.com/security/cve/CVE-2025-32907"},{"source":"nvd","sourceId":"CVE-2026-77680","modified":"2026-08-28T21:17:10.720","url":"https://access.redhat.com/security/cve/CVE-2025-32907"},{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://access.redhat.com/security/cve/CVE-2025-32907"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-77680","tags":["vdb-entry","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","url":"https://access.redhat.com/security/cve/CVE-2026-77680"},{"source":"nvd","sourceId":"CVE-2026-77680","modified":"2026-08-28T21:17:10.720","url":"https://access.redhat.com/security/cve/CVE-2026-77680"},{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-77680"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520892","tags":["issue-tracking","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520892"},{"source":"nvd","sourceId":"CVE-2026-77680","modified":"2026-08-28T21:17:10.720","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520892"},{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520892"}]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/538","tags":["exploit","vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/538"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-26T12:43:47.896Z","url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/538"},{"source":"nvd","sourceId":"CVE-2026-77680","modified":"2026-08-28T21:17:10.720","url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/538"},{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/538"}]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/550","tags":["vendor-reference"],"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","origins":[{"source":"mitre","sourceId":"redhat","modified":"2026-08-25T20:36:45.808Z","url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/550"},{"source":"nvd","sourceId":"CVE-2026-77680","modified":"2026-08-28T21:17:10.720","url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/550"},{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/550"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-77680","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-77680"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77680","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77680"}]},{"source":"euvd","sourceId":"EUVD-2026-66111","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-66111","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-66111","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-66111"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/OJ01-creates/CVE-2026-77680-Security-Analysis","source":"poc-in-github","sourceId":"CVE-2026-77680","description":"Cybersecurity research and vulnerability analysis","modified":"2026-10-21T06:08:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-77680","url":"https://github.com/OJ01-creates/CVE-2026-77680-Security-Analysis"},{"source":"poc-in-github","sourceId":"CVE-2026-77680","modified":"2026-10-21T06:08:31Z","url":"https://github.com/OJ01-creates/CVE-2026-77680-Security-Analysis"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json","productId":"red_hat_enterprise_linux_10:libsoup3","product":"libsoup3 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade to a libsoup version containing merge request !550 (O(N) range coalescing and 200-range limit). Until patched, restrict network access to services using SoupServer, or terminate connections that send Range headers with excessive range counts."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libsoup3","origins":[{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json"}]},{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json","productId":"red_hat_enterprise_linux_10:libsoup3-devel","product":"libsoup3-devel as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade to a libsoup version containing merge request !550 (O(N) range coalescing and 200-range limit). Until patched, restrict network access to services using SoupServer, or terminate connections that send Range headers with excessive range counts."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libsoup3-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json"}]},{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json","productId":"red_hat_enterprise_linux_10:libsoup3-doc","product":"libsoup3-doc as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade to a libsoup version containing merge request !550 (O(N) range coalescing and 200-range limit). Until patched, restrict network access to services using SoupServer, or terminate connections that send Range headers with excessive range counts."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libsoup3-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json"}]},{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json","productId":"red_hat_enterprise_linux_10:libsoup3.src","product":"libsoup3.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade to a libsoup version containing merge request !550 (O(N) range coalescing and 200-range limit). Until patched, restrict network access to services using SoupServer, or terminate connections that send Range headers with excessive range counts."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/libsoup3?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-77680","modified":"2026-08-25T21:26:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77680.json"}]}],"vendorCoverage":{"total":4,"shown":4,"omitted":0,"source":"redhat"}}