CVE-2026-66683

Versions of Custom CSS and JavaScript up to 2.0.16 are vulnerable to unauthenticated sensitive data exposure, allowing attackers to access confidential information without authentication. This vulnerability poses a medium risk, particularly for organizations using these Java components in their web applications. Developers and security teams should prioritize remediation to protect user data and maintain compliance with security standards.