CVE-2026-66691

Nokri versions up to 1.6.6 are vulnerable to unauthenticated broken access control, allowing attackers to exploit the flaw and gain unauthorized access to sensitive functionalities or data. This critical vulnerability, with a CVSS score of 9.8, poses a significant risk to any organization using these versions of Nokri, particularly those handling sensitive information. Organizations should prioritize immediate updates or mitigations to safeguard against potential exploitation.