CVE-2026-62118: CWE-862 Missing Authorization in Dmitry V. Barcode Scanner with Inventory & Order Manager

This vulnerability, identified as CWE-862 Missing Authorization, affects Barcode Scanner with Inventory & Order Manager versions <= 1.13.1. It allows unauthenticated attackers to bypass access control mechanisms, resulting in unauthorized access to sensitive functions or data. The CVSS 3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation can lead to unauthorized disclosure of information, unauthorized modification of data, and potential disruption of service availability within the affected application. Since no privileges or user interaction are required, the risk of exploitation is significant if the vulnerability is present.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious activity. Avoid exposing the vulnerable versions to untrusted networks.