This vulnerability (CVE-2025-7347) in Dinibh Patrol Tracking System allows an attacker with limited privileges to bypass authorization controls by manipulating a user-controlled key, exploiting trusted identifiers. This can lead to unauthorized access and potentially full compromise of system confidentiality, integrity, and availability. The vendor has not provided any response or patch, and no known exploits are reported in the wild. The affected product is not a cloud service, and the vulnerability affects versions up to 10022026.

Successful exploitation can result in complete compromise of the affected system's confidentiality, integrity, and availability due to authorization bypass. Attackers can gain unauthorized access to protected resources or functions within the Dinibh Patrol Tracking System. The high CVSS score (8.8) reflects the critical nature of the impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, organizations should consider restricting access to the affected system, applying compensating controls such as enhanced monitoring of authorization mechanisms, and preparing for updates once a fix is released.