The vulnerability CVE-2026-32348 affects MadrasThemes MAS Videos up to version 1.3.2 and involves missing authorization controls. This results in an access control weakness where unauthorized users can perform actions that should require proper permissions. The CVSS score of 5.3 reflects a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or official remediation guidance is currently available.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions within the MAS Videos application, potentially modifying data or configurations without proper permissions. There is no reported impact on confidentiality or availability. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the MAS Videos application to trusted users only and monitor for unusual activity related to access control. Avoid exposing the application to untrusted networks if possible.