This vulnerability in WANotifier's Notifier component arises from missing authorization checks, which leads to incorrect access control enforcement. It affects all versions up to and including 2.7.13. The CVSS 3.1 vector indicates that an attacker can exploit this remotely without authentication or user interaction, potentially causing limited integrity and availability impacts. The issue is categorized as a medium severity vulnerability due to these factors. No vendor advisory or patch information is available at this time.

An attacker can exploit the missing authorization to perform unauthorized actions that affect the integrity and availability of the Notifier component. While confidentiality is not impacted, the integrity and availability impacts could disrupt normal operations or cause unauthorized modifications. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations where possible to limit exposure. Monitor for updates from WANotifier regarding patches or official mitigations.