CVE-2026-97277 is a broken access control vulnerability (CWE-862) in Apps Mav Social Boost versions <= 3.6.2. The flaw allows an attacker with low privileges to bypass authorization controls, potentially leading to unauthorized access to sensitive information or limited modification capabilities. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and low availability impact.

Successful exploitation could lead to unauthorized access to sensitive data (high confidentiality impact), limited modification of data (low integrity impact), and limited disruption of service (low availability impact). The vulnerability could be exploited remotely by an attacker with low privileges without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected versions and monitor for unusual activity related to authorization bypass attempts.