CVE-2026-15470 | Eleveo Call Recording Software 9.7.0 /callrec/group.jsp improper authorization (EUVD-2026-43192)

A vulnerability described as problematic has been identified in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-15470. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.