This vulnerability (CVE-2026-5792) in Related Marketing Cloud (RMC) involves an authentication bypass via spoofing, classified under CWE-290. The issue permits brute force attacks due to insufficient authentication controls. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with limited confidentiality and integrity impact and no availability impact. The affected versions include all versions up to 12052026. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation is the responsibility of the user or administrator.

Successful exploitation allows an attacker to bypass authentication mechanisms by spoofing, potentially enabling unauthorized access to the Related Marketing Cloud (RMC) system. The impact includes limited confidentiality and integrity loss but no availability impact. This could lead to unauthorized actions or data exposure within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround has been published, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected system and implementing additional authentication controls if possible.