The vulnerability identified as CVE-2026-32435 affects vowelweb VW Pet Shop up to version 1.4.7. It is caused by missing authorization checks, resulting in incorrect access control configurations. This allows unauthorized users to perform actions that should require higher privileges, impacting the integrity of the system. The CVSS v3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to integrity. No patch or vendor advisory is currently available, and no exploits are known in the wild.

The vulnerability allows unauthorized modification or manipulation of data due to missing authorization controls, impacting the integrity of the VW Pet Shop application. There is no impact on confidentiality or availability reported. Since no known exploits exist in the wild, the immediate risk is moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the VW Pet Shop application to trusted users only and monitor for suspicious activity related to access control misuse. Avoid deploying affected versions in untrusted environments.