PT-2026-57648 · Will Moss · Isaiah

Dem0000000 · Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-15542

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. The attack can be initiated remotely. The pull request to fix this issue awaits acceptance.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-15542

Affected Products

Isaiah

References · 8

• https://github.com/will-moss/isaiah/pull/36 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-15542 · Security Note
• https://github.com/will-moss/isaiah/issues/33 · Note
• https://vuldb.com/cve/CVE-2026-15542 · Note
• https://vuldb.com/vuln/377892/cti · Note
• https://vuldb.com/vuln/377892 · Note
• https://github.com/will-moss/isaiah · Note
• https://vuldb.com/submit/855075 · Note