Skip to content

CVE record · 1 source

CVE-2026-126068

CVSS 3.7

Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails.

Vendor: Ruby on Rails
Product: rails
CVSS v3.1: 3.7 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-294

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 6h ago

Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails.

Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails. Prior to 8.1.4.1 and 8.0.5.2, the Action Mailbox Mailgun ingress authenticates a request with an HMAC of the timestamp and token…

CVSS 3.7 Fix available CVE-2026-126068 Ruby on Rails