This vulnerability in enituretechnology LTL Freight Quotes - TQL Edition (up to version 1.2.6) is caused by unsafe deserialization of untrusted data, enabling object injection attacks. The CVSS 3.1 score of 7.2 reflects network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly known and published but no exploit in the wild or patch information is available from the provided data.

Successful exploitation could allow an attacker with high privileges to execute arbitrary code or manipulate application logic via object injection, resulting in full compromise of confidentiality, integrity, and availability of the affected software. This could disrupt freight quoting operations and expose sensitive data handled by the application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users with high privileges and monitor for unusual activity related to deserialization processes.