⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
<img width="400" height="234" src="https://socprime.com/wp-content/uploads/CVE-2026-66066-400x234.
Ruby on Rails has released security updates for a critical Active Storage vulnerability that can allow an unauthenticated attacker to read arbitrary files from an application server through crafted image uploads. Tracked as CVE-2026-66066 and rated 9.5 on the CVSS scale, the flaw can expose secrets accessible to the Rails process and potentially enable remote […] The post CVE-2026-66066: Critical Rails Flaw Exposes Server Files via Image Uploads appeared first on SOC Prime.
Ruby on Rails released security updates for a critical Active Storage vulnerability (CVE-2026-66066) that allows unauthenticated attackers to read arbitrary server files through crafted image uploads. The flaw, rated 9.5 on the CVSS scale, arises from unsafe libvips operations in default Rails configurations.
Ruby on Rails released security updates for a critical Active Storage vulnerability (CVE-2026-66066) that allows unauthenticated attackers to read arbitrary server files through crafted image uploads. The flaw, rated 9.5 on the CVSS scale, arises from unsafe libvips operations in default Rails configurations.
<img width="400" height="234" src="https://socprime.com/wp-content/uploads/CVE-2026-47876-400x234.
Broadcom released emergency updates for a critical VMware ESXi vulnerability, CVE-2026-47876, that enables VM escape and code execution on the hypervisor host. The flaw, rated 9.3 CVSS, resides in the VMXNET3 network adapter and requires guest administrative access.