This vulnerability in solacewp Solace (versions up to 2.1.16) arises from missing authorization checks due to incorrectly configured access control security levels. It allows an attacker with low privileges to perform unauthorized actions that can alter system integrity without requiring user interaction. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

The vulnerability allows unauthorized modification of system components or data, impacting the integrity of the affected system. There is no impact on confidentiality or availability. Exploitation requires network access and low privileges, but no user interaction is needed. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations to prevent unauthorized actions where possible.