Rapid7 at Black Hat USA 2026: See preemptive security in action
2026-07-31T19:23:37Z•648361dee2abc45bb1ea84d5b111c68615f7d700f87e2c1c82ae7dda936186bc
CVE-2026-59309CVE-2026-59310CVE-2026-63077CVE-2026-66066Active-StorageCI-CDMDRMetasploitRuby-on-RailsTeamCityVMware-vCenterarbitrary-file-readauthentication-bypasscriticaldeserializationlibvipsremote-code-executionsecurity-conferenceunauthenticated-exploitationvulnerability
What happened
Rapid7 reports multiple critical vulnerabilities disclosed in late July 2026. CVE-2026-66066 affects Ruby on Rails Active Storage image processing with libvips and may permit unauthenticated arbitrary file reads leading to remote code execution. CVE-2026-59309 and CVE-2026-59310 affect VMware vCenter Server and enable unauthenticated authentication bypass and remote code execution. CVE-2026-63077 affects all TeamCity On-Premises versions and allows unauthenticated command execution through insecure deserialization, potentially exposing credentials and CI/CD pipelines. The feed also includes a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 648361dee2abc45bb1ea84d5b111c68615f7d700f87e2c1c82ae7dda936186bc
- Enrichment time
- 2026-07-31T19:23:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.