This vulnerability (CVE-2025-39477) in Sfwebservice InWave Jobs is classified as CWE-862 (Missing Authorization). It arises from improperly configured access control security levels, enabling unauthorized users to perform actions or access resources without proper permissions. The CVSS 3.1 base score is 9.8, indicating critical severity with network attack vector, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. The affected versions include all versions up to 3.5.8. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation can result in complete compromise of the affected system's confidentiality, integrity, and availability due to missing authorization controls. Attackers can perform unauthorized actions or access sensitive data. There are no known exploits in the wild currently, but the critical CVSS score reflects a high risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected service and monitor for suspicious activity related to InWave Jobs. Avoid exposing the service to untrusted networks.