CVE-2026-2436

Name of the Vulnerable Software and Affected Versions libsoup (affected versions not specified)

Description A use-after-free issue exists in libsoup's SoupServer. Specifically, the soup server disconnect() function can free connection objects before a TLS handshake is finished. If the handshake completes after the object is freed, a dangling pointer is accessed, potentially causing a server crash and resulting in a Denial of Service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.