{"affected":[{"product":"MiroTalk P2P","source":"CNA: VulDB","vendor":"miroslavpejic85","versions":[{"status":"affected","version":"2.0.0"},{"status":"affected","version":"2.0.1"},{"status":"affected","version":"2.0.2"},{"status":"affected","version":"2.0.3"},{"status":"affected","version":"2.0.4"},{"status":"affected","version":"2.0.5"},{"status":"affected","version":"2.0.6"},{"status":"affected","version":"2.0.7"},{"status":"affected","version":"2.0.8"},{"status":"affected","version":"2.0.9"},{"status":"affected","version":"2.0.10"},{"status":"affected","version":"2.0.11"},{"status":"affected","version":"2.0.12"},{"status":"affected","version":"2.0.13"},{"status":"affected","version":"2.0.14"},{"status":"affected","version":"2.0.15"},{"status":"affected","version":"2.0.16"},{"status":"affected","version":"2.0.17"},{"status":"affected","version":"2.0.18"},{"status":"affected","version":"2.0.19"},{"status":"affected","version":"2.0.20"},{"status":"affected","version":"2.0.21"},{"status":"affected","version":"2.0.22"},{"status":"affected","version":"2.0.23"},{"status":"affected","version":"2.0.24"},{"status":"affected","version":"2.0.25"},{"status":"affected","version":"2.0.26"},{"status":"affected","version":"2.0.27"},{"status":"affected","version":"2.0.28"},{"status":"affected","version":"2.0.29"},{"status":"affected","version":"2.0.30"},{"status":"affected","version":"2.0.31"},{"status":"affected","version":"2.0.32"},{"status":"affected","version":"2.0.33"},{"status":"affected","version":"2.0.34"},{"status":"affected","version":"2.0.35"},{"status":"affected","version":"2.0.36"},{"status":"affected","version":"2.0.37"},{"status":"affected","version":"2.0.38"},{"status":"affected","version":"2.0.39"},{"status":"affected","version":"2.0.40"},{"status":"affected","version":"2.0.41"},{"status":"affected","version":"2.0.42"},{"status":"affected","version":"2.0.43"},{"status":"affected","version":"2.0.44"},{"status":"affected","version":"2.0.45"},{"status":"affected","version":"2.0.46"},{"status":"affected","version":"2.0.47"},{"status":"affected","version":"2.0.48"},{"status":"affected","version":"2.0.49"},{"status":"affected","version":"2.0.50"},{"status":"affected","version":"2.0.51"},{"status":"affected","version":"2.0.52"},{"status":"affected","version":"2.0.53"},{"status":"affected","version":"2.0.54"},{"status":"affected","version":"2.0.55"},{"status":"affected","version":"2.0.56"},{"status":"affected","version":"2.0.57"},{"status":"affected","version":"2.0.58"},{"status":"affected","version":"2.0.59"},{"status":"affected","version":"2.0.60"},{"status":"affected","version":"2.0.61"},{"status":"affected","version":"2.0.62"},{"status":"affected","version":"2.0.63"},{"status":"affected","version":"2.0.64"},{"status":"affected","version":"2.0.65"},{"status":"affected","version":"2.0.66"},{"status":"affected","version":"2.0.67"},{"status":"affected","version":"2.0.68"},{"status":"affected","version":"2.0.69"},{"status":"affected","version":"2.0.70"},{"status":"affected","version":"2.0.71"},{"status":"affected","version":"2.0.72"},{"status":"affected","version":"2.0.73"},{"status":"affected","version":"2.0.74"},{"status":"affected","version":"2.0.75"},{"status":"affected","version":"2.0.76"},{"status":"affected","version":"2.0.77"},{"status":"affected","version":"2.0.78"},{"status":"affected","version":"2.0.79"},{"status":"affected","version":"2.0.80"},{"status":"affected","version":"2.0.81"},{"status":"affected","version":"2.0.82"},{"status":"affected","version":"2.0.83"},{"status":"affected","version":"2.0.84"},{"status":"affected","version":"2.0.85"},{"status":"affected","version":"2.0.86"},{"status":"affected","version":"2.0.87"},{"status":"affected","version":"2.1.0"},{"status":"affected","version":"2.1.1"},{"status":"affected","version":"2.1.2"},{"status":"affected","version":"2.1.3"},{"status":"affected","version":"2.1.4"},{"status":"affected","version":"2.1.5"},{"status":"affected","version":"2.1.6"},{"status":"affected","version":"2.1.7"},{"status":"affected","version":"2.1.8"},{"status":"affected","version":"2.1.9"},{"status":"affected","version":"2.1.10"},{"status":"affected","version":"2.1.11"},{"status":"affected","version":"2.1.12"},{"status":"affected","version":"2.1.13"},{"status":"affected","version":"2.1.14"},{"status":"affected","version":"2.1.15"},{"status":"affected","version":"2.1.16"},{"status":"affected","version":"2.1.17"},{"status":"affected","version":"2.1.18"},{"status":"affected","version":"2.1.19"},{"status":"affected","version":"2.1.20"},{"status":"affected","version":"2.1.21"},{"status":"affected","version":"2.1.22"},{"status":"affected","version":"2.1.23"},{"status":"affected","version":"2.1.24"},{"status":"affected","version":"2.1.25"},{"status":"affected","version":"2.1.26"},{"status":"affected","version":"2.1.27"},{"status":"affected","version":"2.1.28"},{"status":"affected","version":"2.1.29"},{"status":"affected","version":"2.1.30"},{"status":"affected","version":"2.1.31"},{"status":"affected","version":"2.1.32"},{"status":"affected","version":"2.1.33"},{"status":"affected","version":"2.1.34"},{"status":"affected","version":"2.1.35"},{"status":"affected","version":"2.1.36"},{"status":"affected","version":"2.1.37"},{"status":"affected","version":"2.1.38"},{"status":"unaffected","version":"2.1.39"}]}],"cveId":"CVE-2026-121539","cwes":["CWE-284","CWE-266"],"description":"A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","version":"4.0"},{"score":6.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","version":"3.1"},{"score":6.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","version":"3.0"},{"score":6.5,"severity":"medium","source":"CNA: VulDB","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C","version":"2.0"},{"score":5.3,"severity":"medium","source":"NVD: cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"},{"score":6.3,"severity":"medium","source":"NVD: cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},{"score":6.5,"severity":"medium","source":"NVD: cna@vuldb.com","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","version":"2.0"}],"modifiedAt":1793747854980,"publishedAt":1793745015617,"references":[{"source":"CNA: VulDB","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/430300"},{"source":"CNA: VulDB","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/430300/cti"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-121539"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/1019996"},{"source":"CNA: VulDB","tags":["related"],"url":"https://github.com/waterhunter2000-svg/vulnerability-reports"},{"source":"CNA: VulDB","tags":["patch"],"url":"https://github.com/miroslavpejic85/mirotalk/commit/4e40471abc48bfc32b4b174b8844716dfc5c1471"},{"source":"cna@vuldb.com","tags":[],"url":"https://github.com/miroslavpejic85/mirotalk/commit/4e40471abc48bfc32b4b174b8844716dfc5c1471"},{"source":"cna@vuldb.com","tags":[],"url":"https://github.com/waterhunter2000-svg/vulnerability-reports"},{"source":"cna@vuldb.com","tags":[],"url":"https://vuldb.com/cve/CVE-2026-121539"},{"source":"cna@vuldb.com","tags":[],"url":"https://vuldb.com/submit/1019996"},{"source":"cna@vuldb.com","tags":[],"url":"https://vuldb.com/vuln/430300"},{"source":"cna@vuldb.com","tags":[],"url":"https://vuldb.com/vuln/430300/cti"}],"remediation":[{"kind":"fix","source":"CNA: VulDB","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/miroslavpejic85/mirotalk/commit/4e40471abc48bfc32b4b174b8844716dfc5c1471"}],"revision":"88975a353032df2d0d5fdf8b0f616a4df6073e7431292375ab2f99f9e507d27a","sources":[{"modifiedAt":1793745015617,"name":"CNA: VulDB","retrievedAt":1793748218462,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121539"},{"modifiedAt":1793747854980,"name":"NVD","retrievedAt":1793751779860,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121539"}],"ssvc":null,"status":"published","title":"miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control","updatedAt":1793751779860}