Product
Ruby on Rails
- First Reported
- Jul 30, 2026
- Latest Reported
- Aug 1, 2026
Reported Context (2)
- Ruby on Rails this week rolled out patches for a critical vulnerability that could allow unauthenticated attackers to achieve remote code execution (RCE). Ruby on Rails Patches Critical Active Storage Vulnerability
- Ruby on Rails has fixed CVE-2026-66066, a critical Active Storage flaw that could let unauthenticated attackers read arbitrary files through crafted image uploads when libvips is used. Critical Rails Active Storage Flaw Enables Unauthenticated File Reads
CVE (1)
People (4)
MITRE ATT&CK (2)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.