This vulnerability, identified as CVE-2026-66470, affects Frontend Admin by DynamiApps versions <= 3.29.10. It is classified as CWE-862 (Missing Authorization), meaning that the application does not properly enforce authorization checks for subscriber roles in the frontend admin interface. This can allow unauthorized users with limited privileges to perform actions beyond their intended scope, potentially leading to integrity violations and denial of service. The CVSS 3.1 score of 7.1 reflects network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. The vulnerability is published and known but lacks an official remediation level or patch at this time.

The vulnerability allows unauthorized actions by subscribers due to missing authorization checks, which can compromise data integrity and availability of the affected system. There is no confidentiality impact reported. The high CVSS score indicates a significant risk of disruption or manipulation of system functions by unauthorized users with subscriber-level privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor vendor communications closely. Implementing additional access control measures or restricting subscriber privileges where possible may reduce risk until a patch is available.