This vulnerability (CVE-2026-39697) in HBSS Technologies MAIO – The new AI GEO / SEO tool is caused by missing authorization controls due to misconfigured access control security levels. It affects versions up to and including 6.2.8. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low. No official patch or remediation level has been published, and no known exploits exist in the wild.

The vulnerability allows an attacker to exploit missing authorization controls to modify information within the affected product, impacting data integrity. There is no impact on confidentiality or availability. The attack can be performed remotely without authentication or user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should review and tighten access control configurations in the affected product to mitigate unauthorized modifications. Monitor vendor communications for updates on patches or official mitigations.