Marshal-Deserialization

Rails Active Storage Arbitrary File Read to RCE via libvips Unfuzzed Loaders (CVE-2026-66066) new EPSS 28%CVE-2026-66066webCRITICAL 9.5Patched2026-07-27