CVE-2026-15470— Eleveo Call Recording Software group.jsp improper authorization
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Eleveo | Call Recording Software | 9.7.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-15470
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Eleveo Call Recording Software group.jsp improper authorization
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Eleveo Call Recording 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
eleveo call recording是eleveo公司的一套电话录音管理系统。 Eleveo Call Recording 9.7.0版本存在安全漏洞，该漏洞源于文件/callrec/group.jsp中存在授权不当问题，可能导致远程攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Eleveo | Call Recording Software | 9.7.0 | cpe:2.3:a:eleveo:call_recording_software:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-15470
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15470
请登录查看更多情报信息。
Proof of Concept for CVE-2026-15470 (1)
Other References for CVE-2026-15470 (1)
IV. Related Vulnerabilities
Same product: Call Recording Software
- CVE-2026-15474
Eleveo Call Recording Software audio.jsp improper authorizat - CVE-2026-15473
Eleveo Call Recording Software Recorded Calls restoreCallAct - CVE-2026-15472
Eleveo Call Recording Software composeEmailAction.do imprope - CVE-2026-15471
Eleveo Call Recording Software pci_dss_status.jsp improper a - CVE-2026-15377
Eleveo Call Recording Software sendlogfile improper authoriz
Same vendor: Eleveo
- CVE-2026-15474
Eleveo Call Recording Software audio.jsp improper authorizat - CVE-2026-15473
Eleveo Call Recording Software Recorded Calls restoreCallAct - CVE-2026-15472
Eleveo Call Recording Software composeEmailAction.do imprope - CVE-2026-15471
Eleveo Call Recording Software pci_dss_status.jsp improper a - CVE-2026-15377
Eleveo Call Recording Software sendlogfile improper authoriz
Same weakness: CWE-285
- CVE-2026-47663
Pathling: Typed CRUD/search/batch providers can lead to serv - CVE-2026-59118
Microsoft Power Apps Elevation of Privilege Vulnerability - CVE-2026-18367
Sophos Endpoint/Home macOS提权漏洞 - CVE-2026-18998
cosmicstack-labs mercury-agent delegate_task Tool sub-agent. - CVE-2026-18817
Baserow Inactive Non-Staff User serializers.py BaserowImpers
V. Comments for CVE-2026-15470
No comments yet