The vulnerability identified as CVE-2026-86450 corresponds to CWE-201, which involves the insertion of sensitive information into sent data within the DetaWix Mobile Web Portal. This flaw allows unauthorized access to functionality due to improper enforcement of ACLs. The issue affects all versions before v1.0.19 of the product. The CVSS 3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact.

Successful exploitation of this vulnerability could allow an attacker to access sensitive information that should be protected and potentially use this to access functionality that is not properly restricted by ACLs. This could lead to unauthorized information disclosure, but there is no indication of integrity or availability impact.

No explicit patch or remediation details are provided in the available data. Since the affected versions are prior to 1.0.19, upgrading to version 1.0.19 or later is implied as a remediation step. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.