CVE-2026-84847: CWE-862 Missing Authorization in brightvesseldev Quick Event Manager

This vulnerability, identified as CVE-2026-84847, affects Quick Event Manager versions up to 9.17 and is characterized by missing authorization controls (CWE-862). It allows unauthenticated attackers to bypass access restrictions, potentially leading to unauthorized modification or manipulation of data or functionality. The CVSS 3.1 base score is 7.5, indicating high severity, with an attack vector of network, no privileges required, and no user interaction needed. Confidentiality impact is none, but integrity impact is high, and availability is unaffected. There is no vendor-provided patch or official remediation level at this time.

The vulnerability allows unauthenticated attackers to bypass authorization controls, leading to high integrity impact. This means attackers can potentially alter or manipulate data or system functions without permission. There is no impact on confidentiality or availability reported. No known exploits in the wild have been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected Quick Event Manager instances where possible and monitor for unusual activity related to unauthorized access attempts.