CVE-2026-65504

An unauthenticated broken access control vulnerability exists in BOX NOW Delivery Croatia versions up to 3.3.0, potentially allowing attackers to gain unauthorized access to sensitive functionalities or data. This high-severity flaw poses a significant risk to organizations using the affected software, particularly those handling sensitive delivery information. Entities utilizing BOX NOW Delivery should prioritize immediate remediation to mitigate potential exploitation risks.