CVE-2026-12859 is a missing authorization vulnerability in Caz Informatics Services Trade Inc.'s Advancity ALMS Cloud. It allows users with limited privileges to access functionality that is not properly constrained by access control lists (ACLs). The vulnerability was published on 2026-10-08 with a CVSS score of 6.5 (medium severity). The vendor was contacted but did not respond, and no patch or remediation information is available.