CVE•Published 2026-02-02•Modified 2026-07-15•1 article on news•4 live references•NVD data
CVE-2026-1761
Vulnerability data via NVD (ingested)
CVSS v3.1
8.6
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
EPSS percentile
57
Exploit Prediction Scoring System · top 43% of all CVEs
Weaknesses (CWE)
Description
A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may result in application crashes or arbitrary code execution in applications that process untrusted server responses, and it does not require authentication or user interaction.
Timeline
Published 2026-02-02
Modified 2026-07-15
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
More intel sources (5)
Shodan report
vuln:CVE-2026-1761Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-1761Censys host search filtered to this CVE id.
grep.app
CVE-2026-1761Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-1761GitHub code search for direct mentions.
Google dork
"CVE-2026-1761" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-17618 repos
superiorlu/AITreasureBoxRuby
🤖 Automatically collected AI repos, tools, websites, papers & tutorials. 实用AI百宝箱 💎
Ostorlab/KEVunknown
Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
brucesongs/kali-clawPython
kali-claw is a self-evolving security agent from the OpenClaw project. It operates 24/7 on Kali Linux, systematically learning and practicing penetration testing across 49 security…
hiifong/starListPython
Export your star's repository list
svg153/awesome-starsJavaScript
rxerium/CISA-KEVPython
An automated repo to track Nuclei template scanning capabilities against the CISA KEV.
Jam0k/Public-Feeds-IOCsunknown
Free, no-auth threat intelligence feeds: validated IOC blocklists (domains, IPs, hashes), threat clusters and CVE data, snapshotted daily. TLP:CLEAR — git history shows when an ind…
SongJunSub/knowledge-gardenShell
읽은 좋은 글들을 요약하고 생각을 덧붙이는 디지털 가든