Skip to content

CVE record · 1 source

CVE-2026-126083

CVSS 7.4

Action Pack is a framework for handling and responding to web requests.

Vendor: Ruby on Rails
Product: rails
CVSS v3.0: 7.4 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-348
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

35

CVE NVD 6h ago

Action Pack is a framework for handling and responding to web requests.

Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remote_ip from Rack::Request#forwarded_for, which under Rack 3 reads the…

CVSS 7.4 Fix available CVE-2026-126083 Ruby on Rails