Search/CVE-2006-4111
● CVE

CVE-2006-4111

VendorrubyonrailsProductrails, ruby on railsDiscoveredAug 14, 2006UpdatedApr 16, 2026

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.

View graph Watch Export
CVSS v3.1
—
EPSS
2.33%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 12, 2026
▲ 0.04pp
2.29% → 2.33% over 2 tracked changes
Connections
3 relationships
Timeline
disclosure → media coverage
Aug 14, 2006
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026