CVE WATCH / VULNERABILITY DETAIL
CVE-2026-126186
HIGHCVSS 8.8NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, ActiveStorage::Blob#open writes a blob to a tempfile whose name carries the extension of the uploaded filename, and hands that path to ffprobe
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-119303 MEDIUM 5.3
- CVE-2026-119035 MEDIUM 6.4
- CVE-2026-119034 MEDIUM 5.3
- CVE-2026-119032 MEDIUM 5.3
- CVE-2026-118439 MEDIUM 4.1
- CVE-2026-118420 MEDIUM 6.8
- CVE-2026-118418 MEDIUM 5.3
- CVE-2026-118041 HIGH 8.8
- CVE-2026-117523 MEDIUM 4.3
- CVE-2026-117522 MEDIUM 6.8