CVE-2026-27391 Stylemix CVE debrief

Who should care

Defenders responsible for uListing installations, especially those with subscriber roles, should assess their exposure and verify access control mechanisms.

Why it matters

A Subscriber Broken Access Control vulnerability in uListing versions up to 2.2.0 requires defenders to verify access control mechanisms, monitor for unauthorized access, and update to a patched version if available.

• Defenders need to verify access control mechanisms for subscriber roles in uListing installations.
• Unauthorized access attempts to the application should be monitored.
• Updating to a patched version, if available, is recommended.

Technical summary

The CVE record describes a Subscriber Broken Access Control vulnerability in uListing versions up to 2.2.0. The CVSS score is 5.4, indicating a medium severity vulnerability.

Defensive priority

Defenders should prioritize verifying the access control mechanisms in uListing installations, especially for subscriber roles, and update to a patched version if available.

Recommended defensive actions

• Verify the access control mechanisms in uListing installations, especially for subscriber roles.
• Update to a patched version if available.
• Monitor for unauthorized access attempts to the application.

Evidence notes

The CVE record and NVD entry provide details on the Subscriber Broken Access Control vulnerability in uListing versions up to 2.2.0. However, specific details about exploitation or affected deployments are not provided.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.