CVE-2026-15377: Eleveo Call Recording Software sendlogfile improper authorization

Published Jul 10, 2026

Updated

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlogfile. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Eleveo Call Recording Software=9.7.0

Event History

Jul 10, 2026

CVE Published

via MITRE·04:15 PM

Data Sourced

via MITRE·04:15 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-15377?

The severity of CVE-2026-15377 is rated as medium with a score of 4.3.

What does CVE-2026-15377 involve?

CVE-2026-15377 involves improper authorization in the Eleveo Call Recording Software's sendlogfile function.

How can CVE-2026-15377 be exploited?

CVE-2026-15377 can be exploited remotely due to the improper authorization in the software.

What version of the software is affected by CVE-2026-15377?

CVE-2026-15377 affects Eleveo Call Recording Software version 9.7.0.

Is there a fix for CVE-2026-15377?

As of the latest updates, a fix for CVE-2026-15377 should be implemented through an update or patch from Eleveo.