CVE-2026-108808 | Eleveo Call Recording Software up to 10.3.0 JWT Token logout id_token_hint get request method with sensitive query strings

October 11, 2026 Yanac

A vulnerability classified as problematic was found in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument id_token_hint can lead to use of get request method with sensitive query strings.

The identification of this vulnerability is CVE-2026-108808. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More