Skip to content

CVE-2026-64645

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
July 30, 2026
Last Seen
July 30, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Rails Active Storage Disclosed79.5

On July 29, 2026, the Ruby on Rails security team published CVE-2026-66066, a critical arbitrary file read and remote code execution (RCE) vulnerability in Active Storage. Discovered by the Ethiack research team, this flaw affects default configurations of Rails 6.x, 7.x, and 8.x that utilize the vi...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachDebianUbuntuCVE-2026-66066CWE-1188 - Insecure Default Initialization of ResourceLibvipsRuby On RailsDocker