Dashboard / CVE-2026-121539

CVE-2026-121539

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 61/100
Published: 2026-11-03 Modified: 2026-11-07 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component.

Weakness Classification (2)

Affected Software (254)

VendorProductVersion
miroslavpejic85 MiroTalk P2P 2.0.0
miroslavpejic85 MiroTalk P2P 2.0.1
miroslavpejic85 MiroTalk P2P 2.0.2
miroslavpejic85 MiroTalk P2P 2.0.3
miroslavpejic85 MiroTalk P2P 2.0.4
miroslavpejic85 MiroTalk P2P 2.0.5
miroslavpejic85 MiroTalk P2P 2.0.6
miroslavpejic85 MiroTalk P2P 2.0.7
miroslavpejic85 MiroTalk P2P 2.0.8
miroslavpejic85 MiroTalk P2P 2.0.9
miroslavpejic85 MiroTalk P2P 2.0.10
miroslavpejic85 MiroTalk P2P 2.0.11
miroslavpejic85 MiroTalk P2P 2.0.12
miroslavpejic85 MiroTalk P2P 2.0.13
miroslavpejic85 MiroTalk P2P 2.0.14
miroslavpejic85 MiroTalk P2P 2.0.15
miroslavpejic85 MiroTalk P2P 2.0.16
miroslavpejic85 MiroTalk P2P 2.0.17
miroslavpejic85 MiroTalk P2P 2.0.18
miroslavpejic85 MiroTalk P2P 2.0.19
miroslavpejic85 MiroTalk P2P 2.0.20
miroslavpejic85 MiroTalk P2P 2.0.21
miroslavpejic85 MiroTalk P2P 2.0.22
miroslavpejic85 MiroTalk P2P 2.0.23
miroslavpejic85 MiroTalk P2P 2.0.24
miroslavpejic85 MiroTalk P2P 2.0.25
miroslavpejic85 MiroTalk P2P 2.0.26
miroslavpejic85 MiroTalk P2P 2.0.27
miroslavpejic85 MiroTalk P2P 2.0.28
miroslavpejic85 MiroTalk P2P 2.0.29
Showing 30 of 254 entries

References & Advisories (6)

https://vuldb.com/vuln/430300
vdb-entry technical-description
https://vuldb.com/submit/1019996
third-party-advisory
https://vuldb.com/vuln/430300/cti
signature permissions-required

Bug Bounty Relevance

61 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.21%
Raw Score 0.002090
Percentile 11.2%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00209
2026-11-13
0.00209
2026-11-12
0.00209
2026-11-10
0.00209
2026-11-09
0.00209
2026-11-08
0.00209
2026-11-07
0.00209
2026-11-06
0.00209
2026-11-05
0.00209
2026-11-04
0.00209

Intelligence Sources

mitre ref →
nvd ref →

External Links