Tag: GMO Flatt Security

Critical CVEs

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability, CVE-2026-66066 (CVSS 9.5), that could allow unauthenticated attackers to read…

Active Storage credential theft CVE-2026-50522 CVE-2026-66066

July 29, 2026

Cyber Companies

GMO Flatt Security: Cybersecurity Company

GMO Flatt Security is a cybersecurity company that independently reported CVE-2026-66066. Researcher RyotaK was credited for the discovery.

CVE-2026-66066 GMO Flatt Security vulnerability research

July 29, 2026