CVE-2026-112829: Missing Authorization in Arraytics Booktics

This vulnerability in Arraytics Booktics arises from missing authorization checks, enabling exploitation of incorrectly configured access control security levels. It affects versions from the initial release up to 1.0.30 inclusive. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, limited confidentiality impact, and no integrity or availability impact.

The vulnerability allows an attacker to access certain functionalities or data without proper authorization, potentially leading to limited confidentiality exposure. There is no impact on integrity or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor vendor communications for updates and apply patches once available.