CVE-2026-62042: Missing Authorization in unFocus Projects Scripts n Styles

CVE-2026-62042 describes a missing authorization vulnerability in the Scripts n Styles product by unFocus Projects. This issue arises from incorrectly configured access control security levels, which may allow unauthorized users to access or interact with functionality that should be restricted. The vulnerability affects versions from 0 up to and including 3.5.8. The CVSS 3.1 base score is 5.3, with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and limited confidentiality impact. No official patch or remediation information is provided in the data.

The vulnerability could allow unauthorized users to access certain features or data within Scripts n Styles due to missing authorization checks. The impact is limited to confidentiality loss without integrity or availability impact. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations to ensure proper authorization enforcement where possible.