CVE-2026-115748

Published 26 October 2026 · tracked since 27 October 2026

Description

**UNSUPPORTED WHEN ASSIGNED**  Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band Registration) implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As this p

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-72752 MEDIUM 6.5
• CVE-2026-50095 MEDIUM 6.1
• CVE-2026-116398 MEDIUM 6.5
• CVE-2026-116400 MEDIUM 6.5
• CVE-2026-115922 MEDIUM 6.2
• CVE-2026-115923 MEDIUM 6.5
• CVE-2026-115966 MEDIUM 6.5
• CVE-2026-115918 MEDIUM 6.5
• CVE-2026-115919 MEDIUM 6.2
• CVE-2026-115920 MEDIUM 6.2

→ Open the live CVE board · all tools