This vulnerability, identified as CWE-862 Missing Authorization, affects Solace Extra software versions up to 1.6.0. It involves broken access control where subscribers may bypass authorization checks, potentially leading to unauthorized modification or disruption of service. The CVSS 3.1 score is 7.1, indicating a high severity with network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.

The vulnerability allows users with some level of privileges to perform unauthorized actions that can degrade or disrupt service availability and compromise system integrity. Confidentiality is not impacted. The attack can be performed remotely over the network with low complexity and does not require user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to trusted users and monitor for unusual activity related to subscriber operations.