Critical 9.5
CVE-2026-66066
CVE-2026-66066 Vulnerability in Ruby on Rails Active Storage
Vendor / product: Ruby on Rails Active Storage
Event date: 2026-07-29
Public PoC: Yes
First tracked by RiskWire: 2026-09-26
Sources & citations (1)
- CVE-2026-66066: an image upload path that reads /proc/self/environ dev.to · 2026-09-26
References
See CVE-2026-66066 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →