Sploitus

30 exploited vulnerabilities in Rails

Vulnerabilities with publicly known exploits

Vendors
Rails, Red Os, Unknown, Alt Linux, Astra Linux, Linux Mint
With known exploits
30
Affected Rubyonrails Rails versions
< 7.2.3.1, 8.0.4.1, 8.1.2.1, 5.2.4.3, 6.0.3.1, 7.1.3.1, 5.2.6.2, 6.0.4.6, 6.1.4.6, 7.0.2.2, 6.0.3.2, 6.1.7.7, 7.1.0, 7.0.4.1, 3.0.6
Affected Trestle-auth Project Trestle-auth versions
= 0.4.0, 0.4.1
Affected Puma versions
< 4.3.11, 5.6.2
Affected Rubyonrails Globalid versions
< 1.0.1
Affected Opensuse Travel Support Program versions
< 2022-11-29
Affected Clockwork Web Project Clockwork Web versions
< 0.1.2
Affected Rubyonrails Rails Html Sanitizers versions
= 1.6.0
Affected Actionpack Project Actionpack versions
< 7.0.4.1

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2026-33195
CVSS 9.8 CRITICAL 2026-03-23FIX AVAILABLE
CVE-2026-33202
CVSS 9.1 CRITICAL 2026-03-23FIX AVAILABLE
CVE-2021-29435
CVSS 8.1 HIGH 2021-04-13FIX AVAILABLE
CVE-2022-23634
CVSS 8.0 HIGH 2022-02-11FIX AVAILABLE
CVE-2026-33174
CVSS 8.7 HIGH 2026-03-23FIX AVAILABLE
CVE-2020-8167
CVSS 6.5 MEDIUM 2020-06-19FIX AVAILABLE
CVE-2024-26142
CVSS 7.5 HIGH 2024-02-24FIX AVAILABLE
CVE-2023-22799
CVSS 7.5 HIGH 2023-01-18FIX AVAILABLE
CVE-2022-46163
CVSS 7.5 HIGH 2023-01-10FIX AVAILABLE
CVE-2020-8164
CVSS 7.5 HIGH 2012-02-17FIX AVAILABLE
CVE-2022-23633
CVSS 7.4 HIGH 2022-02-11FIX AVAILABLE
CVE-2026-33658
CVSS 6.5 MEDIUM 2026-03-25FIX AVAILABLE
CVE-2020-8185
CVSS 6.5 MEDIUM 2020-06-24FIX AVAILABLE
CVE-2023-25015
CVSS 6.5 MEDIUM 2023-02-02FIX AVAILABLE
CVE-2026-33168
CVSS 2.3 LOW 2026-03-23FIX AVAILABLE
CVE-2024-53989
CVSS 6.1 MEDIUM 2024-12-02FIX AVAILABLE
CVE-2024-53988
CVSS 6.1 MEDIUM 2024-12-02FIX AVAILABLE
CVE-2024-53987
CVSS 6.1 MEDIUM 2024-12-02FIX AVAILABLE
CVE-2024-53986
CVSS 6.1 MEDIUM 2024-12-02FIX AVAILABLE
CVE-2024-53985
CVSS 6.1 MEDIUM 2024-12-02FIX AVAILABLE
CVE-2024-26144 1 exploit
CVSS 5.3 MEDIUM 2024-02-24FIX AVAILABLE
CVE-2023-22797
CVSS 6.1 MEDIUM 2023-01-18FIX AVAILABLE
CVE-2026-33167
CVSS 5.3 MEDIUM 2026-03-23FIX AVAILABLE
CVE-2011-1497
CVSS 6.1 MEDIUM 2021-10-19FIX AVAILABLE
CVE-2026-32700
CVSS 6.0 MEDIUM 2026-03-17FIX AVAILABLE
CVE-2026-33173
CVSS 5.3 MEDIUM 2026-03-23FIX AVAILABLE
CVE-2020-8166
CVSS 4.3 MEDIUM 2020-05-26FIX AVAILABLE
CVE-2007-5379
CVSS 5.0 MEDIUM 2007-10-19FIX AVAILABLE
CVE-2023-28362 2 exploits
CVSS 4.0 MEDIUM 2023-06-29FIX AVAILABLE
CVE-2025-57821
CVSS 4.2 MEDIUM 2025-08-27FIX AVAILABLE