Skip to content

CVE-2026-27820

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
July 16, 2026
Last Seen
July 16, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two critical vulnerabilities were discovered in Ruby affecting the Net::IMAP client and Zlib::GzipReader. CVE-2026-42258 allows remote attackers to inject arbitrary IMAP commands via CRLF sequences, while CVE-2026-27820 can lead to a buffer overflow through crafted gzip streams. These vulnerabilitie...

Public Exploits

Checking GitHub for proof-of-concept code…