CVE-2026-53510 in savoninfo

Zusammenfassung

von MITRE • 31.07.2026

Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation names into Ruby source passed to module_eval, allowing Ruby code execution in the application process. This issue is fixed in version 2.17.2.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

GitHub M

Reservieren

09.06.2026

Veröffentlichung

31.07.2026

Moderieren

akzeptiert

Eintrag

VDB-385129

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-53510
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-53510
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-53510/

◂ ZurückÜbersichtWeiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!