CVE-2024-39664 affects YMC Filter & Grids through version 2.8.33 and involves missing authorization controls (CWE-862). This allows attackers to access functionality without proper ACL enforcement, potentially leading to unauthorized information disclosure, modification, or disruption. The vulnerability is remotely exploitable without authentication or user interaction, contributing to its high CVSS score of 7.3. No official fix or patch has been released yet, and no known active exploitation has been reported.

The vulnerability can lead to unauthorized access to protected functions within the YMC Filter & Grids product, potentially resulting in confidentiality, integrity, and availability impacts. Given the lack of required privileges and user interaction, an attacker could exploit this remotely to perform unauthorized actions. However, no known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the affected application where possible and monitor for suspicious activity related to unauthorized access attempts. Avoid exposing the affected service directly to untrusted networks if feasible.