The vulnerability identified as CVE-2026-5228 affects the WriteUp Mobile App by Kurt Software Studio, specifically version 1.3.0. It is characterized by improper access control and missing authorization checks, which permit users with limited privileges to access functionality that should be restricted. This issue is classified under CWE-284 (Improper Access Control) and CWE-862 (Missing Authorization). The CVSS v3.1 base score is 8.8, indicating a high impact with network attack vector, low attack complexity, requiring privileges, no user interaction, and resulting in high confidentiality, integrity, and availability impacts. The vulnerability was published on June 4, 2026, but no patch or official remediation level has been provided by the vendor. The product is not a cloud service, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an attacker with some privileges to access restricted functionality within the WriteUp Mobile App, potentially leading to full compromise of confidentiality, integrity, and availability of the app's data and operations. This could result in unauthorized data access, modification, or disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor the vendor's communications for updates. Until a fix is available, restrict access to the affected app version where possible and consider additional access controls or compensating controls to limit exposure.