Threat database

CVE-2026-12859 is a missing authorization vulnerability in Caz Informatics Services Trade Inc.'s Advancity ALMS Cloud product. It allows unauthorized access to functionality that is not properly constrained by access control lists (ACLs). The vulnerability affects versions up to and including 2026-10-08. The vendor was contacted but did not respond to the disclosure. The CVSS 3.1 base score is 6.5, indicating a medium severity issue with network attack vector, low attack complexity, and requiring low privileges without user interaction. Confidentiality impact is high, but integrity and availability are not affected.