The vulnerability identified as CVE-2025-49986 affects the thanhtungtnt Video List Manager product up to version 1.7. It is a missing authorization issue where certain functionality is accessible without proper ACL enforcement. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but low integrity impact. No patch or vendor advisory is provided, and the product is not a cloud service.

Exploitation of this vulnerability allows an unauthenticated attacker to perform actions that should be restricted by authorization controls, potentially leading to unauthorized modification of data within the Video List Manager. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor for vendor updates and consider implementing compensating controls such as restricting access to the application until a fix is released.