This vulnerability in AcyMailing SMTP Newsletter (up to version 10.11.1) involves missing authorization checks due to misconfigured access control security levels. This flaw could allow an attacker with limited privileges to perform unauthorized actions, impacting the integrity and availability of the system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No vendor advisory or patch information is available at this time.

The vulnerability allows unauthorized modification or disruption of the affected system's operations, leading to potential integrity and availability issues. Confidentiality is not impacted. The high CVSS score reflects the potential for significant disruption if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in AcyMailing SMTP Newsletter to minimize exposure. Monitor for updates from the vendor or trusted security sources.