This vulnerability (CVE-2026-6792) in FlexCity involves missing authorization controls (CWE-862), which means that the product does not properly enforce access control policies. This can allow an attacker with some level of privileges to access resources or perform actions beyond their authorization. The affected versions are from 5.536.0 before 5.542.0. The CVSS vector indicates the attack is network-based, requires low privileges, no user interaction, and impacts confidentiality with high impact but no integrity or availability impact.

Successful exploitation could lead to unauthorized disclosure of sensitive information due to improper access control enforcement. The confidentiality impact is high, but integrity and availability are not affected. This could result in data leakage or exposure of protected resources to unauthorized users.

No official patch or remediation level has been published by the vendor yet. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations in FlexCity to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.