Subscriber Broken Access Control in Ditty <= 3.1.67 versions.
CVE-2026-81274 at the National Vulnerability Database