AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2025-6442.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSHIGH / 7.7No severity score in this snapshot.
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSMicrosoft vendor recordModified Feb 17, 2026

Disclosure summary

Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

Source-reported weakness categories

CWE-444

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

Microsoft Security Updates (CVRF) · 2025-Jun

Open original source · Updated Feb 17, 2026

Ruby WEBrick read_header HTTP Request Smuggling Vulnerability

Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.

Microsoft maximum product score: 7.7

VendorProduct / associationVersion / bounds
Microsoft update guideazl3 rubygem-webrick 1.8.1-2 on Azure Linux 3.0 (MSRC status code 3)
Microsoft update guidecbl2 ruby 3.1.7-1 on CBL Mariner 2.0 (MSRC status code 3)
Microsoft update guidecbl2 rubygem-webrick 1.7.0-2 on CBL Mariner 2.0 (MSRC status code 3)
Microsoft update guideCBL Mariner 2.0 x64 (MSRC status code 3)
Microsoft update guideCBL Mariner 2.0 ARM (MSRC status code 3)
Microsoft update guideAzure Linux 3.0 x64 (MSRC status code 3)
Microsoft update guideAzure Linux 3.0 ARM (MSRC status code 3)
Microsoft update guideazl3 ruby 3.3.5-4 on Azure Linux 3.0 (MSRC status code 3)

Vendor remediation references

  • CBL-Mariner Releases · build 1.8.1-2 · product IDs 20198-17084
  • Vendor guidance · product IDs 20198-17084
  • CBL-Mariner Releases · build 3.1.7-2 · product IDs 20201-17086
  • Vendor guidance · product IDs 20201-17086
  • CBL-Mariner Releases · build 1.7.0-2 · product IDs 20208-17086
  • Vendor guidance · product IDs 20208-17086
  • ruby · build 3.1.7-2 · product IDs 12139
  • Vendor guidance · product IDs 12139
  • rubygem-webrick · build 1.7.0-2 · product IDs 12139
  • Vendor guidance · product IDs 12139
  • ruby · build 3.1.7-2 · product IDs 12140
  • Vendor guidance · product IDs 12140
  • rubygem-webrick · build 1.7.0-2 · product IDs 12140
  • Vendor guidance · product IDs 12140
  • ruby · build 3.3.5-4 · product IDs 12356
  • Vendor guidance · product IDs 12356
  • rubygem-webrick · build 1.8.1-2 · product IDs 12356
  • Vendor guidance · product IDs 12356
  • ruby · build 3.3.5-4 · product IDs 12357
  • Vendor guidance · product IDs 12357
  • rubygem-webrick · build 1.8.1-2 · product IDs 12357
  • Vendor guidance · product IDs 12357
  • CBL-Mariner Releases · build 3.3.5-4 · product IDs 20193-17084
  • Vendor guidance · product IDs 20193-17084

Original records & references

PUBLISHED 2025-07-10T20:00:00-04:00
MODIFIED 2026-02-17T20:12:22-05:00
INGESTED 2026-10-08T12:50:05-04:00