CVE-2026-101144

EUVD-2026-88475
A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
6.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 10.15%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
eleveocall_recording
9.7.0
CNA
Common Weakness Enumeration
References
https://github.com/omarelshopky/cves/tree/main/eleveo/call-recording-software/CVE-2026-101144
https://vuldb.com/cve/CVE-2026-101144
https://vuldb.com/submit/894910
https://vuldb.com/vuln/410996
https://vuldb.com/vuln/410996/cti