CVE-2026-66651

MultiVendorX versions up to 5.0.14 are susceptible to unauthenticated broken access control, allowing attackers to potentially gain unauthorized access to sensitive resources. This vulnerability could lead to data exposure or manipulation, making it critical for organizations using affected versions to prioritize remediation efforts. Security teams should assess their deployment of MultiVendorX to mitigate potential risks associated with this flaw.