Security News Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads TheHackerNews Daniel Bender 29 Jul 2026 Share CVE-2026-66066 could expose Rails server files through image uploads, leaking secrets that may enable RCE or lateral movement.