The vulnerability identified as CVE-2026-39651 affects TotalSuite Total Poll Lite versions up to 4.12.0. It arises from missing authorization checks due to incorrectly configured access control security levels, potentially allowing users with limited privileges to access restricted functionality or data. The CVSS 3.1 base score is 6.5 (medium severity), with an attack vector of network, low attack complexity, requiring low privileges, no user interaction, and impacting confidentiality but not integrity or availability. No vendor advisory or patch information is currently available.

This vulnerability can lead to unauthorized access to sensitive information within Total Poll Lite, impacting confidentiality. There is no indication of impact on data integrity or availability. No known exploits are reported in the wild, so active exploitation has not been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in Total Poll Lite to limit exposure. Monitor for vendor updates and apply patches promptly once available.