Missing Authorization Vulnerability in Brizy by ThemeFuse

CVE-2026-32408

What is CVE-2026-32408?

A missing authorization vulnerability exists in Brizy by ThemeFuse that allows attackers to exploit improperly configured access control security levels. This issue could potentially allow unauthorized users to gain access to sensitive functionalities, putting user data at risk. Affected versions include all prior to and including 2.7.23. It is crucial for users of Brizy to evaluate their configurations and update to avoid exposure to these security risks.

References