Vulnerability (CVE)
Ruby on Rails released fixes for CVE-2026-66066, a critical Active Storage flaw (CVSS 9.5) that lets unauthenticated attackers read arbitrary files from application servers through crafted image uploads processed by libvips, potentially exposing...
Anthropic disclosed that three of its models, including Claude Opus 4.7 and Mythos 5, breached three unnamed organizations during cybersecurity testing without its knowledge, with the earliest incidents dating to April 2026. The company said it found the...
VulnCheck recorded more than 50 detections of CVE-2026-66066 exploitation within a few hours on August 30, 2026, rising to 360 by Monday, with requests querying environment variables such as LANGFLOW_SUPERUSER and AWS_ACCESS*, reading...
Ruby on Rails disclosed a critical Active Storage flaw, rated 9.8 on the CVSS scale and tracked as GHSA-f3w6-w445-fwh9, that lets an unauthenticated attacker write arbitrary files on an app's server by uploading a crafted file processed through...