This vulnerability in Wholesale Suite (versions <= 2.2.6) arises from incorrect privilege assignment, which can lead to privilege escalation. An attacker with low privileges may exploit this flaw to gain unauthorized elevated privileges within the system. The CVSS vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality and integrity impact, and low availability impact. No patch or vendor advisory details are provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with limited privileges to escalate their privileges, potentially compromising sensitive data and altering system integrity. The impact on availability is low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor vendor communications for updates. Until a fix is available, restrict access to trusted users and review privilege assignments carefully.