The vulnerability identified as CVE-2025-14360 affects Kaira Blockons up to version 1.2.19. It is characterized by missing authorization checks, which permit unauthorized access to certain functions that should be protected by ACLs. The CVSS 3.1 base score is 7.5, with an attack vector of network, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality but no impact on integrity or availability. No patch or official remediation information is provided, and the product is not a cloud service.

An attacker can remotely access functionality in Kaira Blockons without proper authorization, potentially leading to unauthorized disclosure of sensitive information (confidentiality impact). There is no indication of impact on integrity or availability. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected versions of Kaira Blockons where possible and monitor for unusual access patterns related to unauthorized functionality use.