CVE-2026-121539Medium· 6.3▾ SunlitA vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argume…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component.
mirotalk_p2p 2.0.0mirotalk_p2p 2.0.1mirotalk_p2p 2.0.2mirotalk_p2p 2.0.3mirotalk_p2p 2.0.4mirotalk_p2p 2.0.5mirotalk_p2p 2.0.6mirotalk_p2p 2.0.7mirotalk_p2p 2.0.8mirotalk_p2p 2.0.9mirotalk_p2p 2.0.10mirotalk_p2p 2.0.11mirotalk_p2p 2.0.12mirotalk_p2p 2.0.13mirotalk_p2p 2.0.14mirotalk_p2p 2.0.15mirotalk_p2p 2.0.16mirotalk_p2p 2.0.17mirotalk_p2p 2.0.18mirotalk_p2p 2.0.19mirotalk_p2p 2.0.20mirotalk_p2p 2.0.21mirotalk_p2p 2.0.22mirotalk_p2p 2.0.23mirotalk_p2p 2.0.24mirotalk_p2p 2.0.25mirotalk_p2p 2.0.26mirotalk_p2p 2.0.27mirotalk_p2p 2.0.28mirotalk_p2p 2.0.29mirotalk_p2p 2.0.30mirotalk_p2p 2.0.31mirotalk_p2p 2.0.32mirotalk_p2p 2.0.33mirotalk_p2p 2.0.34mirotalk_p2p 2.0.35mirotalk_p2p 2.0.36mirotalk_p2p 2.0.37mirotalk_p2p 2.0.38mirotalk_p2p 2.0.39mirotalk_p2p 2.0.40mirotalk_p2p 2.0.41mirotalk_p2p 2.0.42mirotalk_p2p 2.0.43mirotalk_p2p 2.0.44mirotalk_p2p 2.0.45mirotalk_p2p 2.0.46mirotalk_p2p 2.0.47mirotalk_p2p 2.0.48mirotalk_p2p 2.0.49Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121535Low· 3.7miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication
CVE-2026-122158Medium· 4.7InvoiceShelf MemberService.php create access control
CVE-2026-116106High· 7.3HeyCyan App FileProvider access control
CVE-2026-116108Medium· 4.3openbq-org OpenBB Local API Server api_settings.py access control
CVE-2025-10070Medium· 6.3Portabilis i-Educar enturmacao-em-lote access control
CVE-2025-10071Medium· 6.3Portabilis i-Educar cancelar-enturmacao-em-lote access control