CVE-2026-27435 is a missing authorization vulnerability (CWE-862) in WofficeIO Woffice. It arises from incorrectly configured access control security levels, allowing unauthorized actions that impact data integrity. The vulnerability affects Woffice versions prior to 5.4.33, though affected versions are not explicitly confirmed. The CVSS 3.1 base score is 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), indicating network exploitable with low attack complexity, no privileges or user interaction required, and impact limited to integrity. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

The vulnerability allows unauthorized modification or manipulation of data due to missing authorization controls, impacting data integrity. There is no impact on confidentiality or availability according to the CVSS vector. Exploitation is possible remotely without authentication or user interaction, increasing risk exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. Until a fix is available, carefully review and harden access control configurations to mitigate unauthorized access risks.