CVE-2026-112359: Missing Authorization in Amauri.IO WPMobile.App

CVE-2026-112359 describes a missing authorization vulnerability in Amauri.IO's WPMobile.App component (wpappninja). The flaw arises from incorrectly configured access control security levels, enabling unauthorized access to protected resources or functions. The vulnerability affects all versions prior to 11.87. The CVSS 3.1 score of 7.5 reflects high severity due to the ability to exploit remotely without authentication or user interaction, resulting in high confidentiality impact but no integrity or availability impact. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation can lead to unauthorized disclosure of sensitive information due to missing authorization checks. There is no reported impact on data integrity or system availability. The vulnerability can be exploited remotely without requiring privileges or user interaction, increasing the risk of exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and harden access control configurations in WPMobile.App to ensure proper authorization enforcement. Monitor for updates from Amauri.IO regarding patches or official mitigations.