CVE-2026-107432: Missing Authorization in NOUS Ouvert Utile et Simple Event post

This vulnerability in NOUS Ouvert Utile et Simple Event post arises from missing authorization checks, leading to incorrect access control enforcement. Attackers with low privileges can exploit this remotely without user interaction to gain limited confidentiality and integrity impacts. The affected versions are all releases prior to 6.1.2. No known exploits are reported in the wild at this time.

An attacker with low privileges can exploit this vulnerability remotely to bypass access controls, potentially leading to limited unauthorized access affecting confidentiality and integrity of the Event post component. There is no impact on system availability. The overall severity is medium based on the CVSS score of 5.4.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or vendor advisories are provided, users should monitor official NOUS Ouvert Utile et Simple communications for updates. Until a fix is available, restrict access to the Event post component to trusted users only to reduce risk.