This vulnerability (CVE-2026-57316) affects Roxnor GetGenie software versions up to 4.4.2 and results in unauthorized exposure of subscriber sensitive data. It is categorized as CWE-497, which concerns the exposure of sensitive system information to unauthorized entities. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, requiring low privileges but no user interaction, and impacts confidentiality only. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

An attacker with low privileges and network access can gain unauthorized access to sensitive subscriber data, compromising confidentiality. There is no impact on integrity or availability reported. This exposure could lead to privacy violations or further targeted attacks leveraging the disclosed information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected GetGenie instances and monitor for suspicious activity related to sensitive data access. Avoid exposing the service to untrusted networks where possible.