CVE-2026-15374: Eleveo Call Recording Software Group roleAddAction.do improper authorization

Published Jul 10, 2026

Updated

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/roleAddAction.do of the component Group Interface. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Eleveo Eleveo Call Recording Software=9.7.0

Eleveo Call Recording Software Group Interface=9.7.0

Event History

Jul 10, 2026

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2026-15374?

CVE-2026-15374 is a vulnerability in Eleveo Call Recording Software 9.7.0 that involves improper authorization in the Group Interface.

What is the severity of CVE-2026-15374?

CVE-2026-15374 has a medium severity rating of 6.3.

How do I fix CVE-2026-15374?

To mitigate CVE-2026-15374, it is recommended to update Eleveo Call Recording Software to the latest version that addresses this vulnerability.

What components are affected by CVE-2026-15374?

CVE-2026-15374 affects the Group Interface component of the Eleveo Call Recording Software.

Is CVE-2026-15374 exploitable remotely?

Yes, CVE-2026-15374 can be exploited remotely, allowing unauthorized access via the affected functionality.