Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.
CVE-2026-97277 at the National Vulnerability Database