CVE-2026-23550 is an Incorrect Privilege Assignment vulnerability in Modular DS that allows privilege escalation attacks. The vulnerability affects all versions of Modular DS from the initial release through version 2.5.1. This security flaw enables attackers to escalate their privileges within the system, potentially gaining unauthorized access to sensitive functions or data. The vulnerability has been assigned a high criticality rating. Patches and security updates are available through Modular DS version 2.5.2 to address this privilege escalation issue.