CVE-2026-65531 is a missing authorization vulnerability (CWE-862) affecting Themeum Qubely versions up to 1.8.14. It allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized access to restricted features or data. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No known exploits are reported in the wild and no vendor remediation or patch has been published as of the data provided.

The vulnerability could allow unauthenticated attackers to gain unauthorized access to certain features or data within Qubely, potentially leading to partial confidentiality and integrity breaches. There is no indication of availability impact. The medium CVSS score reflects moderate risk due to the high attack complexity and lack of known exploits.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations are provided by the vendor at this time.