VulnSocial

CVE-2026-34835Exploit(rack / rack)

LOWCVSS 6.5 · MEDIUM

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Prioritize remediation for rack rack systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, including /, ?, #, and @. Because req.host returns the full parsed value, applications that validate hosts using naive prefix or suffix checks can be bypassed. This can lead to host header poisoning in applications that use req.host, req.url, or req.base_url for link generation, redirects, or origin validation. This issue has been patched in versions 3.1.21 and 3.2.6.

rack CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-1286

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • rack

Threat summary

  • Public PoC and exploit tooling are both present
  • 2 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
rack
Products
rack

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-03: 2PoC Mentioned / Linked · 2026-07-03: 1Exploit Tool / Code · 2026-07-03: 1Technical Details · 2026-07-03: 107-03
Signal classification2 categories
Exploit
150.0%
General
150.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Cybernote@Cybernote9
    General

    📄 New GitHub project! Black-box Analysis of CVE-2026-34835 (Rack Host Header Bypass). The report analyzes the vulnerability strictly from a DAST perspective without relying on source code review. 🔗 https://github.com/Cyber-note/CVE-2026-34835-Black-box-Analysis #CyberSecurity #BugBounty #RedTeam #DAST #CVE https://t.co/lkqMlsJsYW

    Post summary

    The post announces a GitHub project containing a black‑box analysis of CVE‑2026‑34835, describing it as a Rack Host Header Bypass but providing no PoC, exploit code, patch, or active exploitation details.

    000231.2K
    42 followersView on X
  • Cybernote@Cybernote9
    Exploit

    بما أن ثغرة CVE-2026-34835 جديدة والكل يتكلم عنها بدون وجود أي كود استغلال أو طريقة واضحة للفحص يدوياً.. اشتغلت على الموضوع بفضل الله ونشرت لكم أول تحليل ومنهجية استغلال حصرية من نوع Black-box (غير متوفرة في أي مكان آخر حالياً)! 🔥👇 🔗 رابط المستودع على https://github.com/Cyber-note/CVE-2026-34835-Black-box-Analysis https://t.co/pEwIU9LxYP

    Post summary

    The author has released a black-box exploitation methodology for CVE-2026-34835, providing a repository link with likely functional exploit code, but there is no evidence of active exploitation or vendor fixes.

    10020218
    12 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apprackrack-ruby-

Explore more

Back to dashboardrack CVEsrack vulnerabilities