CVE-2026-65472

The vulnerability allows unauthenticated users to exploit broken access controls in Kit (formerly ConvertKit) versions up to 3.3.5, potentially leading to unauthorized access to sensitive data or functionalities. Organizations using affected versions should prioritize remediation to mitigate the risk of data exposure or manipulation. This is particularly critical for those handling sensitive user information or operating in regulated industries.