The vulnerability identified as CVE-2026-23974 affects uxper Golo versions before 1.7.5. It is caused by missing authorization checks, which result in incorrectly configured access control security levels. This can allow an unauthenticated attacker to perform unauthorized actions that impact the integrity of the system. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with no confidentiality or availability impact, but with integrity impact. No patch or vendor advisory details are currently available.

The vulnerability allows unauthorized modification of data due to missing authorization controls. There is no impact on confidentiality or availability reported. The medium severity score reflects the potential for integrity compromise without requiring authentication or user interaction. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in uxper Golo to prevent unauthorized actions. Monitor for vendor updates regarding patches or official mitigations.