CVE-2026-19639 is an improper access control vulnerability allowing an authenticated non-administrative user to potentially view settings outside their assigned scope. The vulnerability does not allow modification or disruption of service but may expose sensitive configuration information. It has a CVSS 3.1 base score of 4.3, indicating medium severity. No patch or remediation information is currently available. There are no known exploits in the wild. The affected software versions are not specified.