This vulnerability (CVE-2026-65486) is classified as CWE-862 (Missing Authorization) and affects Event post versions up to 6.0.1. It allows unauthenticated attackers to bypass access controls, potentially exposing some confidential information. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No vendor advisory or patch information is available, and no known exploits are reported in the wild.

An unauthenticated attacker can exploit this missing authorization vulnerability to access information that should be restricted, resulting in limited confidentiality impact. There is no impact on integrity or availability according to the CVSS vector. The medium severity score reflects the potential for information disclosure without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to affected versions where possible and monitor for updates from the vendor.