The vulnerability CVE-2026-25459 affects the uixthemes Sober product up to version 3.5.12 and is characterized by missing authorization controls. This results from incorrectly configured access control security levels, which could allow an attacker with limited privileges to perform unauthorized actions. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is present. No patch or official fix information is available, and no known exploits have been reported.

The impact is limited to integrity, meaning an attacker with some privileges could perform unauthorized modifications within the system. There is no impact on confidentiality or availability. The vulnerability requires network access and some level of privileges, but no user interaction is needed. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in uixthemes Sober to ensure proper authorization enforcement. Monitor for vendor updates and apply patches promptly once available.