The vulnerability identified as CVE-2025-49432 affects FWDesign Ultimate Video Player versions up to 10.1. It stems from missing authorization checks, resulting in incorrect access control enforcement. This allows unauthorized users to perform actions that should require proper permissions, impacting the integrity of the application. The CVSS v3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No patch or vendor advisory is currently provided, and the product is not a cloud service.

The vulnerability allows unauthorized users to exploit missing authorization controls, leading to potential integrity violations such as unauthorized modification of data or application behavior. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to limit exposure. Monitor vendor communications for updates on patches or official mitigations.