CVE-2026-97277

Summary

The flaw allows unauthorized access to subscriber data due to broken access control in Social Boost versions up to 3.6.2, which could lead to data breaches or misuse.

Exploitability

Exploitation requires access to the application and knowledge of the affected version; low effort required to identify and exploit.

Blast radius

If exploited, the impact could range from data leakage to full system compromise, depending on the access level of the attacker.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Social Boost version 3.6.3 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.