PT-2026-144728

Name of the Vulnerable Software and Affected Versions Action Pack versions prior to 8.1.4.1 Action Pack versions prior to 8.0.5.2 Description Action Pack handles response format negotiation using the Accept, X-Requested-With, and Content-Type request headers. The ActionController::Rendering set...

Fedora 43 : perl-CGI (2026-a3a026d9ff)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a3a026d9ff advisory. 5.02 bump - Fix CVE-2026-120631 CGI::Cookie-parse backtracking DoS via cookie expires regex - Fix CVE-2026-120632 cubic regex backtracking via craft...

UBUNTU-CVE-2026-109478

Processing comma-separated HTTP header values can cause excessive allocations and resource exhaustion...

CVE-2026-109478

Processing comma-separated HTTP header values can cause excessive allocations and resource exhaustion...

CVE-2026-125405

Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in ParseNTLMAuth in src/dissectors/echttp.c due to unvalidated NTLM message offsets. Attackers can send a crafted HTTP Authorization header observed by Ettercap to read beyond the buffer, disclosing memory or crashing the proce...

CVE-2026-117477

The KUSANAGI software (provided by GMO Prime Strategy Co., Ltd.) is vulnerable to an HTTP header injection due to a CRLF injection flaw within a redirect rule. This flaw occurs when the software writes to the Nginx configuration of WordPress profiles, allowing an attacker to inject arbitrary HTTP...

CVE-2026-117477

KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL...

CVE-2022-46169

CVE-2022-46169 Exploit for CVE-2022-46169 Cacti versions before 1.2.3 Here remoteclientauthorized checks the clients hostname in poller table for entry function remoteclientauthorized // ... $clientaddr = getclientaddr; // ... $clientname = gethostbyaddr$clientaddr; // ... $pollers =...

DEBIAN-CVE-2026-125108

Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Multipart::Parser.parseboundary can skip a leading empty or quoted boundary parameter in a multipart Content-Type header and accept a later parameter. Rack can therefore parse a request body with a boundary tha...

CVE-2026-125108

Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Multipart::Parser.parseboundary can skip a leading empty or quoted boundary parameter in a multipart Content-Type header and accept a later parameter. Rack can therefore parse a request body with a boundary tha...

CVE-2026-90588 Out-of-bounds read in Zephyr HTTP client debug logging of response header fields

The HTTP client's debug helper printheaderfield in subsys/net/lib/http/httpclient.c formatted an httpparser data-callback slice with a %s conversion: snprintkoutput, len + 1, "%s", str. The parser hands its callbacks a pointer and a length into the caller's receive buffer, and those bytes are not...

CVE-2026-90588 Out-of-bounds read in Zephyr HTTP client debug logging of response header fields

The HTTP client's debug helper printheaderfield in subsys/net/lib/http/httpclient.c formatted an httpparser data-callback slice with a %s conversion: snprintkoutput, len + 1, "%s", str. The parser hands its callbacks a pointer and a length into the caller's receive buffer, and those bytes are not...

CVE-2026-125109 Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835

Rack is a modular Ruby web server interface. From 3.0 until 3.1.23 and 3.2.8, Rack::Requesthostwithport, baseurl, and url can return an attacker-controlled invalid authority from Host, X-Forwarded-Host, or Forwarded: host= verbatim. Applications without an independent host allowlist that use thes...

CVE-2026-125109 Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835

Rack is a modular Ruby web server interface. From 3.0 until 3.1.23 and 3.2.8, Rack::Requesthostwithport, baseurl, and url can return an attacker-controlled invalid authority from Host, X-Forwarded-Host, or Forwarded: host= verbatim. Applications without an independent host allowlist that use thes...

CVE-2026-125109 Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835

Rack is a modular Ruby web server interface. From 3.0 until 3.1.23 and 3.2.8, Rack::Requesthostwithport, baseurl, and url can return an attacker-controlled invalid authority from Host, X-Forwarded-Host, or Forwarded: host= verbatim. Applications without an independent host allowlist that use thes...

CVE-2026-125108

Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Multipart::Parser.parseboundary can skip a leading empty or quoted boundary parameter in a multipart Content-Type header and accept a later parameter. Rack can therefore parse a request body with a boundary tha...

CVE-2026-125108

The Rack modular Ruby web server interface is vulnerable to a multipart boundary ambiguity in Rack::Multipart::Parser.parse_boundary . Prior to versions 2.2.25 , 3.1.23 , and 3.2.8 , the parser could skip a leading empty or quoted boundary parameter in a multipart Content-Type header to accept a ...

GHSA-M27G-V28P-F9FX OmniAuth: Host Header Injection Vulnerability

Impact Host header injection risk when using Omniauth with a web framework that does not verify incoming host headers. An example of a framework that provides host header validation is modern Rails when configured appropriately Patches 2.2.0 Workarounds Set the fullhost config in the Omniauth con...

EUVD-2026-117054

OmniAuth: Host Header Injection Vulnerability...

OmniAuth: Host Header Injection Vulnerability

Impact Host header injection risk when using Omniauth with a web framework that does not verify incoming host headers. An example of a framework that provides host header validation is modern Rails when configured appropriately Patches 2.2.0 Workarounds Set the fullhost config in the Omniauth con...