CVE-2026-32332 describes a missing authorization vulnerability in Ays Pro Easy Form (<= 2.7.9). The issue arises from incorrectly configured access control security levels, which may allow unauthorized users to access or perform actions they should not be permitted to. The vulnerability has a CVSS 3.1 base score of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and limited confidentiality impact. No known exploits or patches are currently documented.

The vulnerability could allow an unauthenticated attacker to gain unauthorized access to certain features or data within the Easy Form application, resulting in limited confidentiality impact. There is no impact on integrity or availability reported. No known exploitation in the wild has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, review and strengthen access control configurations in Easy Form to mitigate potential unauthorized access.