This vulnerability in Cloudways Breeze is due to missing authorization checks, resulting in incorrect access control configurations. It affects Breeze versions up to and including 2.2.21. The CVSS score is 5.3 (medium severity), with an attack vector of network, low attack complexity, no privileges required, no user interaction, and impacts availability only. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor patch release.

The vulnerability allows an attacker to exploit missing authorization controls, potentially causing denial of service or availability disruption. There is no impact on confidentiality or integrity according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to affected Breeze versions and monitor for unusual availability issues related to Breeze. Avoid deploying affected versions in production environments if possible.