SECUFOCUSNOW
Home›CVE index›CVE-2026-34785
Review reviewHigh

CVE-2026-34785

rack rack, Red Hat Satellite 6

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static determines whether a request should be served as a static file using a simple string prefix check. When configured with URL prefixes such as "/css", it matches any request path that begins with that string, including unrelated paths such as "/css-config.env" or "/css-backup.sql". As a result, files under the static root whose names merely share the configured prefix may be served unintentionally, leading to information disclosure. This issue has been patched in versions 2.2.23, 3.1.21, and...

CVSS
7.5
EPSS
0.39%
31.5% percentile
CISA KEV
Not listed
Published
2026.04.03
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.39%
Technical severityCVSS 7.5

Vulnerability overview

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static determines whether a request should be served as a static file using a simple string prefix check. When configured with URL prefixes such as "/css", it matches any request path that begins with that string, including unrelated paths such as "/css-config.env" or "/css-backup.sql". As a result, files under the static root whose names merely share the configured prefix may be served unintentionally, leading to information disclosure. This issue has been patched in versions 2.2.23, 3.1.21, and...

Affected product and versions

Product
rack rack, Red Hat Satellite 6
Affected versions
>= < 2.2.23, >= >= 3.0.0.beta1, < 3.1.21, >= >= 3.2.0, < 3.2.6, < 2.2.23, >= 3.0.0 < 3.1.21, >= 3.2.0 < 3.2.6
Fixed versions
2.2.23, 3.1.21, 3.2.6

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that rack rack, Red Hat Satellite 6 and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE
CWE-187, CWE-200, CWE-552
CVE-2026-34785 — rack rack, Red Hat Satellite 6 | SECUFOCUS NOW