CVE-2026-15473: Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization

Published Jul 12, 2026

Updated

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of the component Recorded Calls Page. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Eleveo Eleveo Call Recording Software=9.7.0

Event History

Jul 12, 2026

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-15473?

The severity of CVE-2026-15473 is medium with a score of 6.3.

How do I fix CVE-2026-15473?

To fix CVE-2026-15473, ensure that proper authorization checks are implemented for the restoreCallAction.do endpoint in Eleveo Call Recording Software.

What component is affected by CVE-2026-15473?

CVE-2026-15473 affects the Recorded Calls Page component of Eleveo Call Recording Software.

Can CVE-2026-15473 be exploited remotely?

Yes, CVE-2026-15473 can be exploited remotely.

What type of vulnerability is CVE-2026-15473?

CVE-2026-15473 is classified as an improper authorization vulnerability.