Tag: CVE-2026-66066
Exploited Rails flaw lets attackers read secrets and run code
VulnCheck says KindaRails2Shell is under attack roughly a month after patches shipped.
Image uploads can leak Rails master keys through critical Active Storage bug
A CVSS 9.5 Rails Active Storage flaw lets unauthenticated attackers read arbitrary server files through crafted image uploads.