Tag: unauthenticated file read

Critical CVEs

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability, CVE-2026-66066 (CVSS 9.5), that could allow unauthenticated attackers to read…

Active Storage credential theft CVE-2026-50522 CVE-2026-66066

July 29, 2026

Critical CVEs

Hackers Exploit Unpatched Windmill Path Traversal Flaw CVE-2026-29059 to Read Server Files

A high-severity path traversal vulnerability in the open-source developer platform Windmill, tracked as CVE-2026-29059 (CVSS 7.5), is under active exploitation. The flaw…

active exploitation CISA CISA KEV CVE-2021-27137

July 22, 2026