CVE-2026-12547: Red Hat Enterprise Linux 10

Low severity, CVSS 3.4. EPSS: 0.2% chance of exploitation in the next 30 days.

SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). When the proxy configuration changes (e.g., via system settings or WPAD), cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials.

Affected products

• Red Hat Red Hat Enterprise Linux 10

Published 2026-07-21. Last modified 2026-07-21.