This vulnerability (CWE-307) in Akinsoft MyRezzta affects versions from s2.03.01 up to but not including v2.05.01. It stems from insufficient controls on the number of authentication attempts, enabling attackers to bypass authentication mechanisms, exploit password recovery processes, or perform brute force attacks. The vulnerability is remotely exploitable without privileges or user interaction, with a critical impact on system confidentiality, integrity, and availability. No patch or official fix details are currently provided, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation can lead to unauthorized access through authentication bypass, compromise of password recovery mechanisms, and brute force attacks, potentially resulting in full system compromise. The vulnerability affects confidentiality, integrity, and availability of the affected system. There are no known exploits in the wild, but the high CVSS score indicates a severe risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Akinsoft's communications for updates. Until a fix is available, consider implementing external protections such as limiting authentication attempts via network controls or multi-factor authentication if supported by the product.