CVE-2026-59164 | getnora-io Nora up to 0.9.4 Token Management tokens_revoke improper authorization

October 28, 2026 Yanac

A vulnerability classified as critical has been found in getnora-io Nora up to 0.9.4. Impacted is the function tokens_revoke of the component Token Management. This manipulation causes improper authorization.

This vulnerability appears as CVE-2026-59164. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More