The vulnerability identified as CVE-2026-39716 affects CKThemes Flipmart up to version 2.8 and involves missing authorization due to misconfigured access control security levels. This allows unauthorized users to perform actions that should be restricted. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and impact limited to availability (partial loss). No official remediation or patch information is currently available.

The impact of this vulnerability is limited to a partial loss of availability, meaning an attacker could potentially disrupt service or functionality without requiring privileges or user interaction. There is no confidentiality or integrity impact reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published, users should monitor vendor communications for updates. Until a fix is available, restricting access to the affected Flipmart installation and reviewing access control configurations may help reduce risk.