Skip to content
Threat Feed
Subscribe

Product

WEBrick Through V1.9.2

1 brief RSS
high advisory

CVE-2026-38969: Ruby WEBrick Request Smuggling Vulnerability

A high-severity vulnerability, CVE-2026-38969, exists in Ruby WEBrick versions up to v1.9.2 due to improper re-parsing of the 'trailer Content-Length' header, enabling HTTP request smuggling that attackers can exploit to bypass security controls and gain unauthorized access or execute arbitrary requests.

WEBrick through v1.9.2 web-vulnerability request-smuggling server-side cve ruby
2t 1c