CVE-2026-47737정보

요약

\~에 의해 MITRE • 2026. 07. 14.

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when set_remote_address proxy_protocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive request on the same connection, allowing an attacker to inject a second PROXY header and overwrite REMOTE_ADDR. This issue is fixed in versions 7.2.1 and 8.0.2.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

공개

2026. 07. 14.

모더레이션

검토 중

CPE

진행 중

CWE

CWE-74 (미확인)

EPSS

0.00000

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-47737
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-47737
CVE Details	https://www.cvedetails.com/cve/CVE-2026-47737/

◂ 이전 개요 다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!