CVE-2026-15472

Name of the Vulnerable Software and Affected Versions Eleveo Call Recording Software version 9.7.0

Description An issue exists in the /callrec/composeEmailAction.do endpoint that allows remote attackers to perform a manipulation leading to improper authorization. Improper authorization occurs when a system fails to properly verify if a user has the necessary permissions to access a resource or perform an action.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the /callrec/composeEmailAction.do endpoint to minimize the risk of exploitation.