Skip to content

CVE record · 1 source

CVE-2026-126077

CVSS 6.8

Action Pack is a framework for handling and responding to web requests.

Vendor: Ruby on Rails
Product: rails
CVSS v3.1: 6.8 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness: CWE-200

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 6h ago

Action Pack is a framework for handling and responding to web requests.

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, When ActionDispatch::Cookies reads a signed or encrypted cookie that was written under a rotated secret…

CVSS 6.8 Fix available CVE-2026-126077 Ruby on Rails