CVE-2026-15541

Publié : 13 juillet 2026

Modifié : 13 juillet 2026

Score CVSS

7.3

HIGH

Description détaillée

A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/will-moss/isaiah/https://github.com/will-moss/isaiah/issues/34 https://github.com/will-moss/isaiah/pull/35 https://vuldb.com/cve/CVE-2026-15541 https://vuldb.com/submit/855074 https://vuldb.com/vuln/377891 https://vuldb.com/vuln/377891/cti

Dernières Vulnérabilités

CVE-2026-61985

Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through <= 1.3.7.

VOIR DÉTAILS

CVE-2026-61983

Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30.

VOIR DÉTAILS

CVE-2026-61977

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2.

VOIR DÉTAILS