World Cybersecurity NewsWorld Cybersecurity NewsHome

Topic

Ruby on Rails

Ruby on Rails Releases Security Updates Fixing 21 Vulnerabilities Including Critical Active Storage Flaw
🇯🇵Security NEXT•Nov 5

Ruby on Rails Releases Security Updates Fixing 21 Vulnerabilities Including Critical Active Storage Flaw

Vulnerabilities & Exploits
Attackers Exploit Critical Langflow and Ruby on Rails Flaws for Credential Theft and C2 Infrastructure
🇪🇸Hispasec•Sep 1

Attackers Exploit Critical Langflow and Ruby on Rails Flaws for Credential Theft and C2 Infrastructure

Vulnerabilities & Exploits
Weekly Roundup: Critical Vulnerabilities Hit VMware ESX, FortiOS, Chrome, fastjson, Cisco FMC and Ruby on Rails
🇯🇵Security NEXT•Aug 3

Weekly Roundup: Critical Vulnerabilities Hit VMware ESX, FortiOS, Chrome, fastjson, Cisco FMC and Ruby on Rails

Vulnerabilities & Exploits

Premium Weekly Digest

Exclusive cybersecurity analysis, straight to your inbox

Curated intelligence you won't find in the free feed. $9.99/week, cancel anytime.

Subscribe
🇯🇵Jul 31

Critical RCE Vulnerability CVE-2026-66066 Affects Ruby on Rails Active Storage with libvips

A severe vulnerability tracked as CVE-2026-66066 has been identified in the Ruby on Rails web application framework. The flaw, also referred to as KindaRails2Shell by researchers, impacts applications that use Active Storage with the libvips image processing engine. Attackers can exploit the issue by uploading specially crafted files to read arbitrary files without authentication. This exposure may lead to theft of environment variables, secret keys, and external service credentials, enabling remote code execution or further attacks. The vulnerability stems from unsafe operations in the dependent libvips library. It carries a CVSS v4.0 base score of 9.5 and is rated Critical. JPCERT/CC has issued an advisory urging immediate updates.

Security NEXT•Vulnerabilities & Exploits