CVE-2026-48958

An improper access control vulnerability allows unauthorized users to create custom fields through web services endpoints, potentially leading to unauthorized data manipulation or exposure. Organizations utilizing affected web services should prioritize patching this vulnerability to mitigate risks associated with unauthorized access and data integrity breaches. This is particularly critical for environments handling sensitive information or requiring strict compliance with data protection regulations.