This vulnerability (CVE-2025-26730) affects the NotFound Macro Calculator with Admin Email Optin & Data product up to version 1.0. It allows an attacker to gain unauthorized access to sensitive system information without requiring privileges or user interaction. The CVSS 3.1 base score is 7.5, reflecting a high severity due to the network attack vector and high confidentiality impact. No official fix or patch has been documented, and the vendor has not provided a remediation level. The product is not a cloud service, so remediation depends on vendor or user patching.

An attacker can remotely access sensitive system information without authentication, potentially leading to information disclosure that could aid further attacks. The vulnerability impacts confidentiality (high) but does not affect integrity or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict network access to the affected product where possible and monitor for unusual activity related to information disclosure. Avoid exposing the vulnerable service to untrusted networks.