CVE-2026-105057: CWE-290 Authentication Bypass by Spoofing in Ben Marshall Zero Spam

CVE-2026-105057 is classified as CWE-290 (Authentication Bypass by Spoofing) in the Zero Spam product by Ben Marshall. It affects versions up to 5.7.11, allowing unauthenticated attackers to bypass authentication controls via spoofing techniques. The vulnerability does not impact confidentiality or availability but can affect data integrity. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope.

The vulnerability allows attackers to bypass authentication without privileges or user interaction, potentially leading to integrity compromise of the affected system. There is no impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. No specific mitigation steps are currently documented.