CVE-2026-66066Vulnerability
Reported by 2 independent sources · first reported by Rapid7 · last reported
Last reported 1 month ago
What the reports say
2 reports, newest first · the exact sentence from each-
Risky Bulletin: Dutch intel services to get extensive new powers“[Patrick Garrity on LinkedIn // RyotaK // CVE-2026-66066]”
-
Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!“Description: This adds an exploit module for CVE-2026-66066, a remote code execution vulnerability in Ruby on Rails Active Storage.”
Indicators reported together
named in the same reports- hxxps://github[.]com/jafarov007in 1 report
- hxxps://github[.]com/rapid7/rex-bin_tools/pull/16in 1 report
- docs.metasploit[.]comin 1 report
- nitter[.]netin 1 report
- xcancel[.]comin 1 report
- patak[.]catin 1 report
- micahflee[.]comin 1 report
- jillian.bsky[.]socialin 1 report
Copy these 8 indicators · defanged
Also named with it: CVE-2026-16232, CVE-2026-60137, CVE-2026-63030, CVE-2026-9198, CVE-2026-59774, CVE-2026-3576, CVE-2026-6826, CVE-2026-9082, CVE-2026-0265, CVE-2026-19681, CVE-2026-21820, CVE-2026-56274
Thanks — we review every report.