CVE-2026-15981

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 24, 2026

Last Seen

August 31, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Exploitation of Ruby on Rails Vulnerability CVE-2026-66066 Confirmed72.9

Threat actors are actively exploiting CVE-2026-66066, a critical Ruby on Rails vulnerability known as KindaRails2Shell, which allows unauthenticated attackers to read arbitrary files from servers, potentially leading to remote code execution (RCE). Disclosed on July 30, 2026, this flaw affects numer...

Critical miniOrange SAML SSO Vulnerabilities Allow WordPress Admin Takeover72.0

Two critical authentication bypass vulnerabilities (CVE-2026-61979 and CVE-2026-15981) have been identified in the miniOrange SAML 2.0 Single Sign-On plugin for WordPress, allowing unauthenticated attackers to forge SAML assertions and log in as any existing user, including administrators. These vul...