CVE-2026-107418: Missing Authorization in Arraytics Booktics

This vulnerability in Arraytics Booktics (versions prior to 1.0.29) arises from missing authorization checks, enabling attackers with limited privileges to bypass access control restrictions. This incorrect configuration can lead to unauthorized access affecting confidentiality and integrity of data within the application. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and unchanged scope.

Exploitation of this vulnerability could allow an attacker with limited privileges to gain unauthorized access to resources or perform actions beyond their intended permissions, impacting confidentiality and integrity of data. There is no impact on availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official fixes are provided, users should monitor vendor communications for updates and consider restricting access privileges as a temporary measure.