CVE-2026-101144 | Eleveo Call Recording Software 9.7.0 Query Builder /callrec/searchAction.do access control

September 28, 2026 Yanac

A vulnerability marked as critical has been reported in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls.

This vulnerability is registered as CVE-2026-101144. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More