This vulnerability (CVE-2026-65506) is an unauthenticated broken access control issue in Sonaar's MP3 Audio Player for Music, Radio & Podcast, affecting versions up to 5.12. It allows attackers without authentication to bypass authorization controls, potentially leading to unauthorized modification or interaction with the application. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized integrity modifications within the affected application. There is no impact on confidentiality or availability. The medium CVSS score reflects the limited scope and impact of the issue.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations or workarounds are provided by the vendor at this time.