This vulnerability (CVE-2026-65452) in motov.net Ebook Store versions up to 6.19 is classified as CWE-862: Missing Authorization. It allows unauthenticated attackers to bypass access controls, potentially accessing resources or functionality that should require authorization. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without authentication or user interaction, with low attack complexity. No integrity or availability impacts are noted, only limited confidentiality impact. No official remediation or patch information is currently available.

An unauthenticated attacker can exploit this broken access control vulnerability to gain unauthorized read access to certain data or resources within the Ebook Store application. The impact is limited to confidentiality loss, with no reported impact on integrity or availability. This could lead to exposure of sensitive information to unauthorized parties.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations or workarounds are provided in the available data.