The vulnerability identified as CVE-2026-39685 affects lvaudore The Moneytizer up to version 10.0.10. It is caused by missing authorization checks resulting from incorrectly configured access control security levels. This allows unauthorized users to perform certain actions without proper permissions, impacting the integrity of the system. The CVSS score is 5.3 (medium severity) with an attack vector of network, no privileges required, and no user interaction needed. No official patch or remediation guidance has been provided by the vendor or authoritative sources.

The vulnerability impacts the integrity of the affected system by allowing unauthorized modification or actions due to missing authorization controls. Confidentiality and availability are not impacted according to the CVSS vector. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to the affected system and reviewing access control configurations may help reduce risk.