PT-2026-57647 · Will Moss · Isaiah

Dem0000000 · Publicado 2026-07-13 · Atualizado 2026-07-13 · CVE-2026-15541

Mitre

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

Correção

Incorrect Authorization

Missing Authorization

Enumeração de Fraquezas

CWE-863

CWE-862

Identificadores relacionados

CVE-2026-15541

Produtos afetados

Isaiah

Referências · 9

• https://github.com/will-moss/isaiah/pull/35 · Correção
• https://github.com/will-moss/isaiah/issues/34 · Nota
• https://vuldb.com/vuln/377891 · Nota
• https://vuldb.com/submit/855074 · Nota
• https://vuldb.com/vuln/377891/cti · Nota
• https://twitter.com/CVEnew/status/2076612841201934506 · Publicação no Twitter
• https://vuldb.com/cve/CVE-2026-15541 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15541 · Nota de Segurança
• https://github.com/will-moss/isaiah · Nota