Skip to content

CVE record · 1 source

CVE-2026-115748

CVSS 8.8

UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions.

Vendor: Apache Software Foundation
Product: Apache Vysper
CVSS v3.1: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-639

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

12

CVE NVD 5d ago

**UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions.

**UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band Registration) implementation is missing an authentication check, allowing…

CVSS 8.8 CVE-2026-115748 Apache Software Foundation