CVE-2026-6886 affects Borg SPM 2007, a product developed by BorG Technology Corporation that ended sales in 2008. The vulnerability allows authentication bypass, enabling unauthenticated remote attackers to log into the system as any user. This represents a critical security flaw that completely circumvents the authentication mechanism. The affected product is legacy software that is no longer sold or likely supported. Remote exploitation capability makes this a high-severity issue despite the product's age.