Skip to content

CVE-2026-54498

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
July 18, 2026
Last Seen
July 18, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities Found in Ruby on Rails ViewComponent Framework72.0

Two vulnerabilities, CVE-2026-54497 and CVE-2026-54498, were published on July 17, 2026, affecting the Ruby on Rails ViewComponent framework versions 4.0.0 to 4.12.0. CVE-2026-54497 has a CVSS score of 6.8 and allows for resource exposure due to stale context being retained across renders, potential...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Cwe-79 - Cross-site Scripting (xss)ActiveSupportBludit CMSMailcow: DockerizedNavigate Content Management SystemRuby On RailsSemantic MediaWikiViewComponentWeGIADockerXSS