CVE-2026-64827: Telenia TVox 26.5.3 Authentication Bypass via set_env.php
Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in setenv.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHPSELF and skips authentication when the value matches 'loginadmin.php'. Attackers can append '/loginadmin.php' to the path of any target PHP script to cause the authentication check to pass and gain unauthenticated access to all PHP scripts under the manager HTML directory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Telenia Software TVoxto a version that resolves this vulnerability.Fixed in 26.5.3 - Upgrade
Upgrade
Telenia Software TVoxto a version that resolves this vulnerability.Fixed in 24.9.21 - Configuration
Modify set_env.php so redirectToLoginAdminIRequestHaveAccessToken() does not derive the current page name from PHP_SELF to decide to skip authentication; specifically, do not skip authentication when the value matches 'login_admin.php'.
Telenia TVox (set_env.php) redirectToLoginAdminIRequestHaveAccessToken() authentication bypass condition = Ensure authentication is not skipped when PHP_SELF-derived page name equals 'login_admin.php'
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64827?
The severity of CVE-2026-64827 is critical with a score of 9.8.
How do I fix CVE-2026-64827?
To fix CVE-2026-64827, update Telenia TVox to version 26.5.4 or later.
What systems are affected by CVE-2026-64827?
CVE-2026-64827 affects Telenia TVox versions 26.5.3 and prior, as well as 24.9.21 and prior.
What type of vulnerability is CVE-2026-64827?
CVE-2026-64827 is an authentication bypass vulnerability.
How does CVE-2026-64827 impact Telenia TVox?
CVE-2026-64827 allows unauthenticated users to bypass login requirements, potentially leading to unauthorized access.