The vulnerability is an authentication bypass that allows an attacker to spoof credentials, enabling brute‑force attempts against the authentication system. Because an attacker can obtain unauthorized access, the potential impact includes data exposure, manipulation, or denial of service. The weakness is identified as CWE‑290, indicating improper authentication.

All instances of Hedef Media Promotion Interactive Media Marketing Inc.'s Related Marketing Cloud (RMC) that are running versions up to and including 12052026 are affected. No other versions are listed here. The product is a marketing cloud platform used for digital media campaigns.

The CVSS score of 6.5 indicates a medium‑to‑high severity. While the EPSS score is not available, the absence of a KEV listing suggests no known widespread exploitation at this time. However, the attack vector described in the CVE—that an attacker can spoof authentication—implies that the vulnerability can be engaged remotely, often via brute‑force login attempts. Consequently, the risk to a system that exposes RMC to external users is moderate to high, especially if rate limiting or multi‑factor authentication is not in place.