CVE-2026-82225: CWE-288 Authentication Bypass Using an Alternate Path or Channel in Metagauss RegistrationMagic

This vulnerability in Metagauss RegistrationMagic (<= 6.0.9.8) allows an unauthenticated attacker to bypass authentication controls by exploiting an alternate path or channel, as identified by CWE-288. The CVSS 3.1 vector indicates network attack vector with high attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity. The vulnerability is publicly disclosed but lacks an official remediation or patch at this time.

Successful exploitation could allow an attacker to gain unauthorized access to the RegistrationMagic system, compromising confidentiality and integrity of data. There is no indication of availability impact. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected system and monitor for suspicious activity related to authentication bypass attempts.