This vulnerability in PenciDesign Soledad versions up to 8.6.9 involves incorrect privilege assignment, which can lead to privilege escalation. The CVSS 3.1 base score of 9.8 reflects that the vulnerability is remotely exploitable without user interaction and requires no privileges to exploit, resulting in complete compromise of confidentiality, integrity, and availability. No patch or official remediation details are currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation allows an attacker to escalate privileges on the affected system, potentially gaining full control over the application and underlying resources. This can lead to complete compromise of confidentiality, integrity, and availability of the affected system. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor PenciDesign's official channels for updates. Until a fix is available, consider limiting exposure of the affected software to untrusted networks and users where possible.