CVE-2026-110893: Missing Authorization in Brainstorm Force SureDash

This vulnerability in Brainstorm Force SureDash arises from missing authorization checks, enabling attackers to bypass access control mechanisms. The issue affects all versions from the initial release up to and including 1.12.2. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to confidentiality loss, with no integrity or availability impact reported. No known exploits are currently in the wild, and no official patch or vendor advisory is provided in the available data.

An attacker can exploit the missing authorization to gain unauthorized access to certain functionalities or data within SureDash, potentially leading to limited confidentiality breaches. There is no reported impact on integrity or availability. The vulnerability does not require any privileges or user interaction, making it easier to exploit remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor Brainstorm Force communications for updates and consider restricting network access to SureDash instances where feasible.