A vulnerability has been found in Eleveo Call Recording Software 9.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlogfile. This manipulation causes improper authorization.

This vulnerability appears as CVE-2026-15377. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.