CVE-2026-110892: Missing Authorization in Brainstorm Force SureDash

This vulnerability in Brainstorm Force SureDash arises from missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The issue affects all versions from the initial release up to 1.12.2. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is primarily confidentiality loss, with no integrity or availability impact reported.

An attacker with low privileges can exploit this vulnerability remotely to gain unauthorized access to sensitive information, resulting in a confidentiality breach. There is no indication of integrity or availability impact. No known exploits are reported in the wild at this time.

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the SureDash application to trusted users and networks where possible.