Critical Ruby on Rails Vulnerability Under Active Attack | CVE-2026-66066

Cyber threat actors have begun actively exploiting a critical-severity in Ruby on Rails vulnerability, months after security researchers disclosed the flaw and emergency patches were released. Dubbed KindaRails2Shell by security researchers and tracked as CVE-2026-66066 (CVSS v4 score: 9.5), the unauthenticated arbitrary file read flaw allows...