Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.
CVE-2026-97297 at the National Vulnerability Database