Threats tagged 'ghsa-3r77-5vf8-j558'

A missing authorization vulnerability exists in iHomefinder, Inc.'s Optima Express software up to version 9.0.0. This flaw allows unauthorized network attackers to access functionality without proper access control, potentially leading to high confidentiality impact. The vulnerability is identified as CVE-2026-116393 with a CVSS 3.1 base score of 7.5, indicating high severity. No public exploits or patches are currently documented.