CVE-2026-85309: CWE-862 Missing Authorization in Supsystic Ultimate Maps by Supsystic

This vulnerability (CWE-862) in Ultimate Maps by Supsystic arises from missing authorization checks, enabling attackers to bypass access control restrictions. It affects versions up to 1.5.3 of the plugin. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Exploitation of this vulnerability could allow unauthorized users to perform actions that should be restricted by access control mechanisms, potentially leading to limited integrity impact within the affected system. There is no impact on confidentiality or availability reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Supsystic and consider restricting access to the plugin's administrative functions as a precaution.