The vulnerability CVE-2026-32375 affects raratheme Travel Diaries up to version 1.2.4 and involves missing authorization checks. This results in incorrectly configured access control security levels, enabling unauthorized users to perform actions that should require proper authorization. The CVSS score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity loss without affecting confidentiality or availability. No patch or vendor advisory is currently available to confirm remediation status.

Exploitation of this vulnerability could allow an attacker to modify data without proper authorization, impacting data integrity. There is no evidence of confidentiality breach or denial of service. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected Travel Diaries application to trusted users only and monitor for unauthorized changes.