CVE-2026-15471: Eleveo Call Recording Software pci_dss_status.jsp improper authorization

Published Jul 12, 2026

Updated

A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pcidssstatus.jsp. Performing a manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Eleveo Call Recording Software=9.7.0

Event History

Jul 12, 2026

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 AM

DescriptionSeverityWeakness

Mar 26, 58497

Event

via NVD·09:52 AM

Frequently Asked Questions

What is the severity of CVE-2026-15471?

The severity of CVE-2026-15471 is medium with a score of 4.3.

How do I fix CVE-2026-15471?

To fix CVE-2026-15471, ensure that you apply security patches provided by Eleveo for version 9.7.0.

What software is affected by CVE-2026-15471?

CVE-2026-15471 affects Eleveo Call Recording Software version 9.7.0.

Can CVE-2026-15471 be exploited remotely?

Yes, CVE-2026-15471 allows for remote exploitation due to improper authorization.

What component of Eleveo Call Recording Software is impacted by CVE-2026-15471?

CVE-2026-15471 impacts the file /callrec/pci_dss_status.jsp within the Eleveo Call Recording Software.