The vulnerability identified as CVE-2025-58616 involves missing authorization controls in the Frisbii Pay payment gateway integration (reepay-checkout-gateway). This results from incorrectly configured access control security levels, potentially allowing unauthorized actions. The affected versions are from initial releases through 1.8.2.1. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges but no user interaction. The impact affects availability but not confidentiality or integrity. No vendor advisory or patch information is provided at this time.

The vulnerability can lead to denial of service or disruption of availability in the affected Frisbii Pay component due to missing authorization checks. Confidentiality and integrity are not impacted according to the CVSS vector. No known exploits have been reported in the wild, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and strengthen access control configurations in the reepay-checkout-gateway component to prevent unauthorized access. Monitor vendor communications for updates on patches or official mitigations.