VDB
CVE-2026-33176
CVE-2026-33176
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Das IBM License Metric Tool dient der Lizenzverwaltung für IBM Produkte.
EPSS 0.61% · 47.3th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.61%
47.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open Source | Open Source Ruby on Rails <8.1.2.1 | |
| Red Hat | Red Hat Enterprise Linux | |
| Open Source | Open Source Ruby on Rails <8.0.4.1 | |
| Open Source | Open Source Ruby on Rails <7.2.3.1 | |
| HCL | HCL BigFix Compliance <2.0.18 | |
| IBM | IBM License Metric Tool 9.2 |
Timeline
- Mar 23, 2026 CVE Published
- Mar 24, 2026 EPSS Score
- Mar 24, 2026 PoC Published
- Mar 25, 2026 EPSS Score
- Mar 25, 2026 Coalition ESS Score
- Mar 25, 2026 Security Advisory
- May 7, 2026 Distribution Patch
- May 7, 2026 Security Advisory
- May 10, 2026 Distribution Patch
- May 10, 2026 Security Advisory
- May 10, 2026 Distribution Patch
- May 10, 2026 Security Advisory
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0833.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0833 advisory
- https://rubyonrails.org/2026/3/23/Rails-Versions-7-2-3-1-8-0-4-1-and-8-1-2-1-have-been-released advisory
- https://discuss.rubyonrails.org/t/cve-2026-33167-possible-xss-vulnerability-in-action-pack-debug-exceptions/90913 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33168-possible-xss-vulnerability-in-action-view-tag-helpers/90912 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33169-possible-redos-vulnerability-in-number-to-delimited-in-active-support/90911 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33170-possible-xss-vulnerability-in-safebuffer-in-active-support/90910 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33173-insufficient-filtering-of-metadata-in-active-storage-direct-uploads/90909 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33174-possible-dos-vulnerability-in-active-storage-proxy-mode-via-range-requests/90908 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33176-possible-dos-vulnerability-in-active-support-number-helpers/90907 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33195-possible-path-traversal-in-active-storage-diskservice/90904 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33202-possible-glob-injection-in-active-storage-diskservice/90903 advisory
- https://discuss.rubyonrails.org/t/cve-2026-33658-possible-dos-vulnerability-in-active-storage-proxy-mode-via-multi-range-requests/90906 advisory
- https://access.redhat.com/errata/RHSA-2026:14874 advisory
- https://access.redhat.com/errata/RHSA-2026:14835 advisory
- https://access.redhat.com/errata/RHSA-2026:14873 advisory
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131664 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1687.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1687 advisory
- https://www.ibm.com/support/pages/node/7273983 advisory