CVE-2026-66425 describes an authentication bypass vulnerability in Gutena Forms (all modules including Contact, Survey, Feedback, Booking, and Custom Form Builder) versions <= 1.9.0. The flaw allows unauthenticated attackers to bypass authentication controls by leveraging an alternate path or channel, classified as CWE-288. The vulnerability has a CVSS 3.1 score of 6.5 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but low integrity and low availability impacts. No vendor advisory or patch information is currently available, and no active exploitation has been reported.

The vulnerability allows unauthenticated attackers to bypass authentication, potentially leading to unauthorized actions that affect the integrity and availability of the affected application. There is no confidentiality impact reported. The medium CVSS score reflects moderate risk due to ease of exploitation and potential impact on application functionality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.