CVE-2026-15542

Publié : 13 juillet 2026

Modifié : 13 juillet 2026

Score CVSS

7.3

HIGH

Description détaillée

A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. The attack can be initiated remotely. The pull request to fix this issue awaits acceptance.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/will-moss/isaiah/https://github.com/will-moss/isaiah/issues/33 https://github.com/will-moss/isaiah/pull/36 https://vuldb.com/cve/CVE-2026-15542 https://vuldb.com/submit/855075 https://vuldb.com/vuln/377892 https://vuldb.com/vuln/377892/cti

Dernières Vulnérabilités

CVE-2026-61985

Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through <= 1.3.7.

VOIR DÉTAILS

CVE-2026-61983

Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30.

VOIR DÉTAILS

CVE-2026-61977

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2.

VOIR DÉTAILS