Product
Rails
- First Reported
- Aug 1, 2026
- Latest Reported
- Aug 1, 2026
Reported Context (1)
- A critical flaw in Rails Active Storage, tracked as CVE-2026-66066, can let an unauthenticated attacker read arbitrary files and potentially achieve remote code execution when libvips is used. Rails Patches Critical Active Storage Flaw That Can Expose Files and Enable RCE
CVE (1)
MITRE ATT&CK (1)
Vendors (1)
Products (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.