CVE-2026-97297

Summary

The flaw allows unauthorized access to subscriber data due to broken access control in Gratisfaction versions up to 4.6.3, posing a significant risk to data integrity and confidentiality.

Exploitability

Exploitation is relatively straightforward given the broken access control, requiring an attacker to exploit misconfigured permissions or directly target the affected version.

Blast radius

If exploited, the impact could be severe, potentially leading to data breaches and loss of subscriber trust, with wide-ranging consequences for the service provider.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Gratisfaction 4.6.4 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.