The vulnerability CVE-2026-25323 affects MiKa OSM versions up to 6.1.12 and stems from missing authorization checks caused by misconfigured access control security levels. This weakness allows an attacker with low privileges and no user interaction to perform actions that can alter data integrity over a network. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No patch or vendor advisory is available to confirm remediation status.

The impact is limited to integrity loss without affecting confidentiality or availability. An attacker with low privileges can exploit the missing authorization to perform unauthorized modifications within the affected MiKa OSM versions. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in MiKa OSM to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.