This vulnerability (CVE-2026-2398) in Adam Retail Automation Ltd.'s MobilMen 20T product involves an authorization bypass through a user-controlled key, classified under CWE-639. This flaw enables an attacker with some privileges to escalate their privileges further. The affected version explicitly stated is version 3. The vendor has not provided any response or patch information. The CVSS v3.1 score of 8.8 reflects high impact on confidentiality, integrity, and availability, with network attack vector, low attack complexity, no user interaction, and unchanged scope.

Successful exploitation allows an attacker to bypass authorization controls and escalate privileges, potentially gaining unauthorized access to sensitive functions or data. The vulnerability impacts confidentiality, integrity, and availability at a high level. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should monitor for official updates from Adam Retail Automation Ltd. and consider implementing compensating controls to restrict access to affected systems until a fix is released.