CVE-2026-111828: Improper Validation of Specified Quantity in Input in Mamunur Rashid Classified Listing

This vulnerability in Mamunur Rashid Classified Listing arises from improper validation of input quantities, which results in access to functionality that is not properly restricted by ACLs. The issue affects all versions from initial release through 6.1.5 (effectively versions >=0 <6.2.0). The CVSS 3.1 score is 4.3 (medium severity), with network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, limited confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is provided, and no known exploits are reported.

An attacker with low privileges can access functionality that should be restricted by ACLs, potentially leading to unauthorized access to certain features or data with limited confidentiality impact. There is no reported impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application and monitor for unusual access patterns related to ACL bypass attempts.