Skip to content

CyberSIXT Search

CVE · coverage timeline

CVE-2026-66066Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

7 articles from 4 outlets between 30 Jul and 31 Aug. First reported by SecurityOnline. The busiest day was Mon 3 Aug, with 2 articles.

Articles: 7; all time · from 4 outlets
Days covered: 4; of 33 days · all time
Busiest day: 2; articles on Mon 3 Aug
Last 7 days: 0a day; vs 0.1 a day · previous 7 days
First report: 30 Jul; SecurityOnline
Exploit probability: 27%; EPSS · higher than 98% of CVEs

Coverage over time

7 articles · 30 Jul – 31 Aug

30 JulFirst report30 Jul · SecurityOnline

Show as table

CVE-2026-66066: articles per day
Day (UTC)	Articles	Outlets
Thu 30 Jul	2	SecurityOnline 1, Rapid7 1
Sat 1 Aug	2	SecurityOnline 1, SecurityWeek 1
Mon 3 Aug	2	Security Affairs 1, Rapid7 1
Mon 31 Aug	1	SecurityWeek 1

Articles

7 articles

Mon 31 Aug1 article

11:29
CVE-2026-66066 Ruby on Rails Flaw Triggers Remote Code ExecutionSecurityWeek

Mon 3 Aug2 articles

19:21
CVE-2026-66066 flaw lets attackers read files in Ruby on RailsRapid7
07:26
Ruby on Rails fixes critical Active Storage bug CVE-2026-66066Security Affairs

Sat 1 Aug2 articles

11:25
Ruby on Rails Patches Critical VulnerabilitySecurityWeek
11:25
CVE-2026-66066: Rails Active Storage RCE Exploit Code Now PublicSecurityOnline

Thu 30 Jul2 articles

16:59
Critical Ruby on Rails Bug Exposes Files via Image UploadRapid7
04:31
Critical Rails flaw exposes files, risks RCE via CVE-2026-66066SecurityOnline · first report