Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-09-04 · 02:17 UTC
articleTotal: 1172 reports

Filtered Reports

2 / 2 results
Active filter:tag: #web-applications✕ clear
Rails Active Storage flaw enables file read and RCE by unauthenticated userscriticalbug_reportVulnerability
bug_reportVulnerability

Rails Active Storage flaw enables file read and RCE by unauthenticated users

Ruby on Rails applications using the Active Storage framework. Specific vulnerable versions not provided in available data. Patched versions released by Rails team.

Ruby on Rails1 Aug · 12:20 UTC
Rails Active Storage flaw allows file read via crafted image uploadscriticalbug_reportVulnerability
bug_reportVulnerability

Rails Active Storage flaw allows file read via crafted image uploads

Ruby on Rails 7.0.0–7.2.3.1, 8.0.0–8.0.5, 8.1.0–8.1.3 using Active Storage with libvips for image processing and accepting untrusted uploads. Rails 6.0.0–6.1.7.10 affected only when Vips explicitly configured (non-default).

CVE-2026-6606629 Jul · 16:10 UTC