This vulnerability (CVE-2026-59528) affects ShipTime: Discounted Shipping Rates software versions up to 1.1.1, allowing unauthorized exposure of subscriber sensitive data. It is categorized as CWE-497, which involves exposure of sensitive system information to unauthorized entities. The CVSS 3.1 base score is 7.5 (high), with attack vector network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), scope unchanged (S:U), and high confidentiality impact (C:H) but no impact on integrity or availability. No official patch or remediation level has been published, and no known exploits are currently reported.

An attacker can remotely access sensitive subscriber data without authentication or user interaction, potentially leading to privacy breaches or unauthorized data disclosure. The confidentiality impact is high, but integrity and availability remain unaffected. This exposure could result in unauthorized control or misuse of subscriber information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, monitoring vendor communications for updates is recommended. Avoid exposing the affected software to untrusted networks until a fix is released.