This vulnerability (CVE-2026-27435) in WofficeIO Woffice is classified as CWE-862 (Missing Authorization). It allows attackers to exploit improperly configured access control, potentially leading to unauthorized actions that affect data integrity. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low. The affected versions are all versions prior to 5.4.33, though the exact affected versions are not explicitly stated in the input data. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized users to perform actions that could alter data integrity within the Woffice application. There is no impact on confidentiality or availability. The medium severity rating and CVSS score of 5.3 reflect the potential for integrity compromise without elevated privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been provided by the vendor as of the published date. Users should monitor vendor communications for updates and apply patches once available.