Ruby on Rails vulnerabilities

Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.

5 matching records

UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)Vuln · CVE-2026-66066 · Cloudflare · rails · Cloudflare WAF rules · CVE.org · FIRST EPSS · Ruby on RailsPatch nowKEVEPSS 32.90%Aug 3, 2026
High7.5Rails Ruby on Rails Path Traversal VulnerabilityVuln · CVE-2019-5418 · rubyonrails · rails · CISA KEV · CVE.org · FIRST EPSS · Ruby on RailsPatch nowKEVEPSS 98.51%Mar 27, 2019
High7.5Ruby on Rails Directory Traversal VulnerabilityVuln · CVE-2016-0752 · Rails · Ruby on Rails · CISA KEV · CVE.org · FIRST EPSS · Ruby on RailsPatch nowKEVEPSS 95.54%Feb 15, 2016
High7.5Ruby on Rails Directory Traversal VulnerabilityVuln · CVE-2014-0130 · Rails · Ruby on Rails · CISA KEV · CVE.org · FIRST EPSS · Ruby on Rails, Red HatPatch nowKEVEPSS 53.70%May 7, 2014
Unknownrubyonrails rails Improper Input ValidationVuln · CVE-2013-0156 · rubyonrails · rails · CVE.org · FIRST EPSS · Exploit Database · Ruby on RailsPatch nowKEVEPSS 98.98%May 28, 2013

Sort