This vulnerability in Malcure Malware Scanner (<=16.8) arises from missing authorization checks, which results in improper access control. An attacker with at least low privileges (PR:L) can exploit this over a network (AV:N) without user interaction (UI:N) to cause integrity impacts (I:L) but no confidentiality or availability impacts. The CVSS 3.1 base score is 4.3, reflecting a medium severity level. No vendor advisory or patch information is available at this time, and the product is not a cloud service.

The vulnerability allows an attacker with some privileges to bypass authorization controls, potentially modifying or interfering with the malware scanner's operations, leading to integrity issues. There is no impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Malcure Malware Scanner plugin to trusted users only and monitor for unusual activity related to the plugin's functionality.