The vulnerability CVE-2026-27328 affects DevsBlink EduBlink up to version 2.0.7 and is characterized by missing authorization checks. This results in incorrect access control enforcement, allowing unauthorized users to perform actions that should be restricted. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. No patch or vendor advisory is available to confirm remediation status.

The impact is limited to integrity, meaning unauthorized modifications or actions could be performed within the affected EduBlink system. There is no impact on confidentiality or availability. Since no known exploits are reported, the risk of active exploitation appears low at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and strengthen access control configurations where possible to mitigate unauthorized actions. Monitor vendor channels for updates regarding patches or official mitigations.