CVE-2026-66887: The affected products are missing authorization on

The affected products are missing authorization on state-changing CGIs and session checks are not performed.