This vulnerability (CVE-2026-56008) in Fusion Builder versions <= 3.15.4 is classified as CWE-266 (Incorrect Privilege Assignment). It allows users with Contributor privileges to escalate their permissions, potentially gaining unauthorized access or control within the affected system. The CVSS 3.1 base score of 8.8 reflects network attack vector, low attack complexity, required low privileges, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow a user with Contributor privileges to escalate their access rights, potentially leading to full compromise of the affected Fusion Builder installation. This could result in unauthorized data disclosure, modification, or disruption of service. The high CVSS score indicates a critical impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit Contributor role assignments to trusted users only and monitor for suspicious activity related to privilege escalation attempts.