The vulnerability identified as CVE-2026-32339 affects the raratheme Bakes And Cakes software up to version 1.2.9. It arises from missing authorization checks, enabling unauthorized users to bypass access control mechanisms. This could allow an attacker to perform unauthorized actions that impact the integrity of the system, although confidentiality and availability are not affected. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized users to exploit improperly configured access control, leading to potential unauthorized modification of data (integrity impact). There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.