The vulnerability identified as CVE-2026-5792 involves an authentication bypass by spoofing in the Related Marketing Cloud (RMC) product by Hedef Media Promotion Interactive Media Marketing Inc. This weakness (CWE-290) permits attackers to bypass authentication mechanisms, facilitating brute force attacks. The issue affects all versions of RMC through 12052026. The CVSS 3.1 base score of 6.5 reflects a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

An attacker can bypass authentication controls by spoofing, which may allow unauthorized access to the Related Marketing Cloud (RMC) system. This could lead to partial compromise of confidentiality and integrity of data within the affected system. There is no indication of impact on availability. The vulnerability enables brute force attacks, increasing the risk of unauthorized access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for vendor updates and consider implementing additional access controls or rate limiting to mitigate brute force attempts if possible.