CVE-2026-27344 describes a Missing Authorization vulnerability in inseriswiss inseri core versions up to 1.0.5. This flaw arises from incorrectly configured access control security levels, potentially allowing unauthorized access to sensitive information. The CVSS 3.1 score of 5.9 reflects a network attack vector requiring high attack complexity but no privileges or user interaction. The vulnerability impacts confidentiality but does not affect integrity or availability. No official patch or mitigation details are currently available, and no known exploits have been reported.

The vulnerability impacts confidentiality by allowing unauthorized access due to missing authorization controls. There is no reported impact on integrity or availability. No known exploits in the wild have been identified, limiting immediate risk. The medium severity score reflects moderate risk requiring attention but not indicating critical system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict network exposure of affected versions and review access control configurations to mitigate unauthorized access risks.