{"uuid": "99a5694e-7b97-4e70-aa60-5263838efba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrxdvtp3q32i", "content": "\u26a0\ufe0f PATCH NOW\n\nA critical Ruby on Rails flaw (CVE-2026-66066, CVSS 9.5) lets an unauthenticated attacker upload a rigged image and read any file on the server.\n\nThe prize: secret_key_base, the key that signs every session.\n\nFix: patch to 7.2.3.2, 8.0.5.1, or 8.1.3.1.", "creation_timestamp": "2026-07-31T16:13:21.955550Z"}