Tag: CVSS 9.5

Critical CVEs

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability, CVE-2026-66066 (CVSS 9.5), that could allow unauthenticated attackers to read…

Active Storage credential theft CVE-2026-50522 CVE-2026-66066

July 29, 2026

Critical CVEs

CVE-2026-66066: Critical Active Storage Vulnerability in Ruby on Rails

CVE-2026-66066 is a critical vulnerability in Ruby on Rails Active Storage with a CVSS score of 9.5. It allows unauthenticated attackers to…

Active Storage CVE-2026-66066 CVSS 9.5 File Read

July 29, 2026