Active Storage

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenAug 31, 2026
Last mentionedAug 31, 2026

Timeline

1 articles · newest first

KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)

Critical CVE-2026-66066 in Rails' Active Storage/libvips allows unauthenticated arbitrary file read and possible RCE; active exploitation now observed.

Help Net SecurityAug 31, 12:00 UTC · Aug 31, 2026VulnerabilityExploitedCVE-2026-660664 · 1 read

Related CVEs

by mentions

CVE-2026-6606630%9.5
Unauthenticated Arbitrary File Read in Ruby on Rails Active Storage
published Jul 30, 2026Ruby on Rails Active Storage (Action Pack)PoC

Appears with

libvipsproduct · 1
Ethiackvendor · 1
VulnCheckvendor · 1
Akamaivendor · 1
Ruby on Railsproduct · 1
Railsproduct · 1
GMO Flatt Securityvendor · 1

Entities are extracted by the model from each article. First seen Aug 31, 2026, last mentioned Aug 31, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.