CVE-2026-15376: Eleveo Call Recording Software statisticReportAction.do improper authorization
Published Jul 10, 2026
·Updated
A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/statisticReportAction.do. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
1 affected component
Eleveo Call Recording Software=9.7.0
Event History
Jul 10, 2026
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-15376?
CVE-2026-15376 has a medium severity rating of 6.3.
2
How do I fix CVE-2026-15376?
To fix CVE-2026-15376, update Eleveo Call Recording Software to the latest version provided by the vendor.
3
What type of vulnerability is CVE-2026-15376?
CVE-2026-15376 is classified as an improper authorization vulnerability.
4
Can CVE-2026-15376 be exploited remotely?
Yes, CVE-2026-15376 can be exploited remotely.
5
What file is impacted by CVE-2026-15376?
CVE-2026-15376 impacts the file /callrec/statisticReportAction.do in Eleveo Call Recording Software.