CVE-2026-53510

Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation names into Ruby source passed to module_eval, allowing Ruby code execution in the application process. This issue is fixed in version 2.17.2.

• CWE-94

• https://github.com/savonrb/savon/commit/8f22eb543e7436f6247172c9be47e22792d375e9
• https://github.com/savonrb/savon/releases/tag/v2.17.2
• https://github.com/savonrb/savon/security/advisories/GHSA-mx5j-mp4f-g8jg

Published

Jul 31, 2026

Last Modified

Jul 31, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53501Thumbor is an open-source photo thumbnail service by globo.c…8.2
• CVE-2026-53502Thumbor is an open-source photo thumbnail service by globo.c…8.7
• CVE-2026-53503Thumbor is an open-source photo thumbnail service by globo.c…7.5
• CVE-2026-53504Thumbor is an open-source photo thumbnail service by globo.c…7.5
• CVE-2026-53505Thumbor is an open-source photo thumbnail service by globo.c…7.5
• CVE-2026-5351A weakness has been identified in Trendnet TEW-657BRM 1.00.1…8.8
• CVE-2026-53511calibre is an e-book manager. Prior to 9.10.0, a malicious E…8.5
• CVE-2026-53512Better Auth is an authentication and authorization library f…9.1
• CVE-2026-53513Better Auth is an authentication and authorization library f…9.6
• CVE-2026-53514Better Auth is an authentication and authorization library f…7.7
• CVE-2026-53515Better Auth is an authentication and authorization library f…7.1
• CVE-2026-53516Better Auth is an authentication and authorization library f…8.3