CVE-2026-106610: Miniorange OTP Verification

Critical severity, CVSS 9.8.

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.

Affected products

• Miniorange Miniorange OTP Verification: up to and including 5.5.7

Published 2026-10-10. Last modified 2026-10-10.