rootpwn

medium · CVSS v3 3.5 · CVSS v4 5.1

CVE-2026-101141

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audi…

Description

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Scores

Severity
medium
CVSS v2
4
CVSS v3
3.5
CVSS v4
5.1
EPSS
—

← All CVEs

Related CVEs

medium

CVE-2026-101858

A remote OS command injection flaw exists in RaspAP raspap-webgui versions up to 3.5.5, allowing attackers to execute arbitrary commands via the SSID field. The vulnerability is triggered by manipulating the ssid argument in WiFiManager::writeWpaSupplicant. It can be exploited without authentication, potentially compromising the underlying system.

View analysis

medium

CVE-2026-86157

Progress Telerik Fiddler Everywhere before v8.2.0 exposes privileged IPC functionality. A local low‑privileged attacker can manipulate launch parameters to replace UI or settings, potentially leaking OAuth tokens or executing local code. This vulnerability affects users running the affected version on Windows, Linux, or macOS.

View analysis

medium

CVE-2026-101279

OpenDMARC up to 1.4.2 contains an integer overflow in the pct argument of the DMARC parser, which can be triggered remotely and may corrupt memory or cause a denial of service. It affects any mail server using the vulnerable OpenDMARC library.

View analysis

medium

CVE-2026-101859

A command‑injection flaw exists in RaspAP raspap‑webgui’s OpenVPN configuration handler, allowing remote attackers to execute arbitrary OS commands via the cfg_id parameter. This can compromise the confidentiality, integrity, and availability of the device and any connected networks.

View analysis