The themebeez Fascinate product suffers from a missing authorization vulnerability (CVE-2026-57779) in versions up to 1.1.5. This vulnerability arises due to incorrectly configured access control security levels, which may allow unauthorized users to perform actions they should not be permitted to. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and an impact limited to integrity loss without confidentiality or availability impact. No vendor advisory or patch information is currently available, and no exploits have been reported in the wild.

An attacker can exploit the missing authorization to perform unauthorized actions that affect the integrity of the system or data. There is no impact on confidentiality or availability reported. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the affected Fascinate versions where possible to limit unauthorized access.