https://vulnerability.circl.lu/sightings/feed 2026-08-01T07:30:00.742702+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d1bf0a2a-ff05-485d-be6e-35304ae3e759/export 2026-08-01T07:30:00.766507+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d1bf0a2a-ff05-485d-be6e-35304ae3e759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 35 interactions\nCVE-2026-16232: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14540: 3 interactions\nCVE-2026-16232: 3 interactions\nCVE-2026-51371: 3 interactions\n", "creation_timestamp": "2026-08-01T04:58:42.935917Z"} 2026-08-01T04:58:42.935917+00:00 https://vulnerability.circl.lu/sighting/c8d42133-6ef1-4d40-a569-a9f83f21a25d/export 2026-08-01T07:30:00.768330+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c8d42133-6ef1-4d40-a569-a9f83f21a25d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/6mftuc6mbvh6b", "content": "Re: Rails CVE-2026-66066: Possible arbitrary file read and remote code execution in Active Storage variant processing", "creation_timestamp": "2026-08-01T03:01:25.735567Z"} 2026-08-01T03:01:25.735567+00:00 https://vulnerability.circl.lu/sighting/ea956ff6-2881-4b09-9a4e-66d88db11b2a/export 2026-08-01T07:30:00.768460+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ea956ff6-2881-4b09-9a4e-66d88db11b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3355", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 libvips \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Active Storage \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Ruby on Rails \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0435\u0441\u0443\u0440\u0441\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-10713\nCVE-2026-66066\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://discuss.rubyonrails.org/t/cve-2026-66066-possible-arbitrary-file-read-and-remote-code-execution-in-active-storage-variant-processing/91432\nhttps://github.com/rails/rails/security/advisories/GHSA-xr9x-r78c-5hrm", "creation_timestamp": "2026-08-01T00:00:29.814100Z"} 2026-08-01T00:00:29.814100+00:00 https://vulnerability.circl.lu/sighting/aa51771f-3b3c-4e5d-bb60-b020a292da81/export 2026-08-01T07:30:00.768579+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aa51771f-3b3c-4e5d-bb60-b020a292da81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96037", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KindaRails2Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xsha\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 16:59:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-66066 + File Read, RCE, Scanner, Lab \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T00:00:25.601408Z"} 2026-08-01T00:00:25.601408+00:00 https://vulnerability.circl.lu/sighting/7c2536d1-9fbc-46e4-91e5-2fd46288afa6/export 2026-08-01T07:30:00.768678+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7c2536d1-9fbc-46e4-91e5-2fd46288afa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "published-proof-of-concept", "source": "Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ", "content": "", "creation_timestamp": "2026-08-01T00:00:11.167034Z"} 2026-08-01T00:00:11.167034+00:00 https://vulnerability.circl.lu/sighting/9342d1e9-8809-4d9f-9dee-786bc2e5dbba/export 2026-08-01T07:30:00.768763+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9342d1e9-8809-4d9f-9dee-786bc2e5dbba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "published-proof-of-concept", "source": "Telegram/57kgthPlcq0SdzKJJB0-p5vNcHKAbE1eV94lCqYuwiHW3w8", "content": "", "creation_timestamp": "2026-08-01T00:00:11.033457Z"} 2026-08-01T00:00:11.033457+00:00 https://vulnerability.circl.lu/sighting/88dcda9e-1d9e-4ce4-a78b-8841143cd062/export 2026-08-01T07:30:00.768855+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "88dcda9e-1d9e-4ce4-a78b-8841143cd062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "Telegram/57kgthPlcq0SdzKJJB0-p5vNcHKAbE1eV94lCqYuwiHW3w8", "content": "", "creation_timestamp": "2026-07-31T22:00:02.657707Z"} 2026-07-31T22:00:02.657707+00:00 https://vulnerability.circl.lu/sighting/ce40dd4f-4aa6-48eb-939e-2aedd1ae49de/export 2026-08-01T07:30:00.768935+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ce40dd4f-4aa6-48eb-939e-2aedd1ae49de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ", "content": "", "creation_timestamp": "2026-07-31T22:00:02.601760Z"} 2026-07-31T22:00:02.601760+00:00 https://vulnerability.circl.lu/sighting/31fe5ee7-22a8-4a7a-8058-a70697942e9a/export 2026-08-01T07:30:00.769017+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "31fe5ee7-22a8-4a7a-8058-a70697942e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://t.me/GithubRedTeam/96037", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KindaRails2Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xsha\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 16:59:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-66066 + File Read, RCE, Scanner, Lab \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T18:00:04.081247Z"} 2026-07-31T18:00:04.081247+00:00 https://vulnerability.circl.lu/sighting/d69b5121-36b4-404f-9cb0-a9a59b9c1e4f/export 2026-08-01T07:30:00.769102+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "d69b5121-36b4-404f-9cb0-a9a59b9c1e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66066", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/rails-security-advisory-av26-767", "content": "", "creation_timestamp": "2026-07-31T16:45:15.953339Z"} 2026-07-31T16:45:15.953339+00:00