CVE-2026-66610

Unauthenticated Cross Site Scripting (XSS) vulnerabilities in Urna versions 2.6.2 and earlier allow attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking, data theft, or defacement. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation, especially those with web-facing applications that handle sensitive user data.