High-severity CVE-2026-66443 affects Pete Nelson REST API Log

## Overview CVE-2026-66443 affects Pete Nelson REST API Log versions 1.7.1 and earlier. This vulnerability allows unauthenticated users to access sensitive data. The CVSS score for this issue is 7.5, indicating a high severity level. ## Technical Details The vulnerability stems from improper access controls within the REST API Log. Attackers can exploit this flaw to retrieve sensitive information without authentication. This includes user data and configuration settings that should remain confidential. The affected software versions do not adequately validate user permissions, leading to unauthorized data exposure. ## Impact Organizations using affected versions of Pete Nelson REST API Log are at risk of data breaches. Sensitive information could be accessed by malicious actors, potentially leading to further exploitation. The exposure of such data can result in compliance violations and reputational damage. ## Mitigation Defenders should upgrade to the latest version of Pete Nelson REST API Log immediately. Version 1.7.2 addresses this vulnerability by implementing proper authentication checks. Additionally, organizations should review their API access controls and monitor for any unauthorized access attempts. Regular security audits can help identify and mitigate similar vulnerabilities in the future.