HackSpeak/CVE-2026-66066

PoC

CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing

view exploit source poc_in_githubauthor HackSpeakpublished 2026-08-03catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-66066US	—OT elevated	26.5% (98th)	Exploit	2026-07-30
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.