CVE-2026-24634 affects Rustaurius Ultimate Reviews versions up to 3.2.16 and involves an authorization bypass vulnerability caused by improperly configured access control security levels. Specifically, the flaw allows an attacker to bypass authorization checks by manipulating a user-controlled key, potentially gaining unauthorized read access to data. The vulnerability has a CVSS 3.1 base score of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), indicating network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to confidentiality loss. No patch or official fix information is currently available, and no exploits are known in the wild.

The vulnerability allows unauthorized users to bypass access controls and gain limited confidential information from the affected application. There is no impact on integrity or availability. The moderate CVSS score reflects the confidentiality impact without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Rustaurius vendor communications for updates. In the meantime, review and tighten access control configurations where possible to reduce exposure.