This vulnerability involves missing authorization checks in Heureka Group's Heureka software (versions <= 1.1.0), allowing unauthenticated or unauthorized users to access functionality that should be restricted by Access Control Lists (ACLs). The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to integrity loss, with no confidentiality or availability impact reported. No official patch or remediation guidance is currently provided.

The vulnerability allows unauthorized users to perform actions that should be restricted, potentially leading to unauthorized modification of data or system state (integrity impact). There is no confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected Heureka versions and monitor for unusual activity related to unauthorized function access. Avoid deploying affected versions in exposed environments where unauthorized access is possible.