CVE-2026-34853

CVE-2026-34853 is a permission bypass vulnerability affecting the LBS (Location-Based Services) module that allows unauthenticated attackers to circumvent access controls. The vulnerability carries a CVSS score of 7.5 (HIGH) with a network-based attack vector requiring low complexity and no user interaction, making it relatively straightforward to exploit remotely. The primary impact is on availability, as successful exploitation could disrupt service functionality, though confidentiality and integrity are not compromised. The vulnerability currently has a low exploitation probability score (EPSS 0.000050000) and is not listed on the CISA Known Exploited Vulnerabilities catalog, indicating no active exploitation in the wild at this time. With a FAUCET Risk Score of 48/100 and inactive status on industry hot lists, this represents a moderate-priority vulnerability requiring patching but not suggesting imminent widespread attacks.