CVE-2026-73350

SupportCandy versions up to 3.5.1 are vulnerable to unauthenticated broken authentication, allowing attackers to exploit this weakness to gain unauthorized access to user accounts. This could lead to data breaches and unauthorized actions within the application. Organizations using affected versions should prioritize patching this vulnerability to safeguard their systems and user data.