CVE-2026-5387: The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simula

CVE-2026-5387 is a critical vulnerability that allows unauthenticated attackers to bypass access controls and perform actions normally restricted to administrator roles (Simulator Instructor or Simulator Developer), potentially leading to privilege escalation (unauthorized elevation of access level) and unauthorized changes to simulation parameters, training configuration, and training records. The vulnerability has a CVSS score (0-10 severity rating) of 9.3, classified as critical. The flaw stems from missing authorization checks in the affected software.