Tag: Ethiack

Critical CVEs

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability, CVE-2026-66066 (CVSS 9.5), that could allow unauthenticated attackers to read…

Active Storage credential theft CVE-2026-50522 CVE-2026-66066

July 29, 2026

Cyber Companies

Ethiack: Cybersecurity Research Firm

Ethiack is a cybersecurity research firm credited with independently reporting CVE-2026-66066 to the Ruby on Rails team. Researchers André Baptista, Bruno Mendes,…

CVE-2026-66066 Ethiack vulnerability research

July 29, 2026