CVE-2026-15470 is an improper authorization vulnerability affecting Eleveo Call Recording Software version 9.7.0. The issue resides in an unspecified functionality within the /callrec/group.jsp file, enabling remote attackers to perform unauthorized actions. The vulnerability has been publicly disclosed, but the vendor has not provided any response or remediation. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow remote attackers to bypass authorization controls in Eleveo Call Recording Software 9.7.0, potentially leading to unauthorized access or actions within the affected functionality. The impact is rated medium based on the CVSS score of 5.3, with low confidentiality, integrity, and availability impacts.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded to the disclosure, users of Eleveo Call Recording Software 9.7.0 should consider implementing compensating controls such as restricting network access to the affected application, monitoring for suspicious activity, and preparing to apply any future vendor updates promptly. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.