The vulnerability identified as CVE-2025-32688 affects Nebojsa Target Video Easy Publish versions up to and including 3.8.9. It is characterized by missing authorization checks, which means that certain operations may be accessible to users without the required permissions. The CVSS 3.1 base score is 5.4 (medium), with an attack vector of network, low attack complexity, requiring low privileges, no user interaction, and impacting confidentiality and integrity to a limited extent. No patch or official fix information is currently available, and the product is not a cloud service.

The missing authorization vulnerability could allow an attacker with low privileges to access or modify data beyond their intended permissions, leading to limited confidentiality and integrity impacts. There is no impact on availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor vendor communications for updates. Until a patch is available, restrict access to the affected versions where possible and review user privileges carefully to minimize risk.