CVE-2026-85407 | Eleveo Quality Management 9.7.0 Conversation events labels denial of service

A vulnerability was found in Eleveo Quality Management 9.7.0 and classified as problematic. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations/<ID>/events of the component Conversation Handler. The manipulation of the argument labels results in denial of service.

This vulnerability is identified as CVE-2026-85407. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More