This vulnerability in WEDOS Global (<= 1.2.2) is caused by missing authorization checks, which permits unauthorized users to access certain functionality that should be restricted by ACLs. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but a low integrity impact. The issue was published on 2025-09-26, with no vendor patch or advisory currently available. The product is not a cloud service, so remediation depends on vendor patching or updates.

The vulnerability allows unauthorized users to perform actions that should be restricted, potentially leading to unauthorized modification or manipulation of data or functionality (integrity impact). There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor vendor communications for updates. Until a fix is released, restricting access to the affected functionality through network or application-level controls may help reduce risk.