The vulnerability identified as CVE-2025-31386 in Simple:Press is due to missing authorization checks, which results in incorrectly configured access control security levels. This can allow an attacker without privileges to perform unauthorized actions that affect the integrity of the affected system. The issue impacts all versions of Simple:Press up to 6.11.5. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity only.

The vulnerability can lead to unauthorized modification or manipulation of data or settings within Simple:Press, affecting the integrity of the system. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — no official patches or fixes have been published by the vendor. Users should monitor the vendor's advisory channels for updates and apply any official patches once available. Until then, review and tighten access control configurations as a precautionary measure.