{"api_version":"1","generated_at":"2026-11-04T01:41:23+00:00","cve":"CVE-2026-121539","urls":{"html":"https://cve.report/CVE-2026-121539","api":"https://cve.report/api/cve/CVE-2026-121539.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-121539","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-121539"},"summary":{"title":"miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control","description":"A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component.","state":"PUBLISHED","assigner":"VulDB","published_at":"2026-11-03 23:17:34","updated_at":"2026-11-03 23:17:34"},"problem_types":["CWE-266","CWE-284","CWE-284 Improper Access Controls","CWE-266 Incorrect Privilege Assignment"],"metrics":[{"version":"4.0","source":"cna@vuldb.com","type":"Secondary","score":"5.3","severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}},{"version":"4.0","source":"CNA","type":"DECLARED","score":"5.3","severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","data":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","version":"4.0"}},{"version":"3.1","source":"cna@vuldb.com","type":"Primary","score":"6.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"}},{"version":"3.1","source":"CNA","type":"DECLARED","score":"6.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","data":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","version":"3.1"}},{"version":"3.0","source":"CNA","type":"DECLARED","score":"6.3","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","data":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","version":"3.0"}},{"version":"2.0","source":"cna@vuldb.com","type":"Secondary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}},{"version":"2.0","source":"CNA","type":"DECLARED","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C","data":{"baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C","version":"2.0"}}],"references":[{"url":"https://vuldb.com/submit/1019996","name":"https://vuldb.com/submit/1019996","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/miroslavpejic85/mirotalk/commit/4e40471abc48bfc32b4b174b8844716dfc5c1471","name":"https://github.com/miroslavpejic85/mirotalk/commit/4e40471abc48bfc32b4b174b8844716dfc5c1471","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/waterhunter2000-svg/vulnerability-reports","name":"https://github.com/waterhunter2000-svg/vulnerability-reports","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/vuln/430300/cti","name":"https://vuldb.com/vuln/430300/cti","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/cve/CVE-2026-121539","name":"https://vuldb.com/cve/CVE-2026-121539","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/vuln/430300","name":"https://vuldb.com/vuln/430300","refsource":"cna@vuldb.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-121539","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121539","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.0","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.1","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.2","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.3","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.4","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.5","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.6","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.7","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.8","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.9","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.10","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.11","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.12","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.13","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.14","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.15","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.16","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.17","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.18","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.19","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.20","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.21","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.22","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.23","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.24","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.25","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.26","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.27","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.28","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.29","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.30","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.31","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.32","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.33","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.34","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.35","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.36","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.37","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.38","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.39","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.40","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.41","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.42","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.43","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.44","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.45","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.46","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.47","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.48","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.49","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.50","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.51","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.52","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.53","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.54","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.55","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.56","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.57","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.58","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.59","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.60","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.61","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.62","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.63","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.64","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.65","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.66","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.67","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.68","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.69","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.70","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.71","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.72","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.73","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.74","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.75","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.76","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.77","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.78","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.79","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.80","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.81","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.82","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.83","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.84","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.85","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.86","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.0.87","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.0","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.1","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.2","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.3","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.4","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.5","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.6","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.7","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.8","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.9","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.10","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.11","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.12","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.13","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.14","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.15","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.16","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.17","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.18","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.19","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.20","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.21","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.22","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.23","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.24","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.25","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.26","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.27","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.28","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.29","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.30","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.31","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.32","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.33","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.34","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.35","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.36","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.37","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"affected 2.1.38","platforms":[]},{"source":"CNA","vendor":"miroslavpejic85","product":"MiroTalk P2P","version":"unaffected 2.1.39","platforms":[]}],"timeline":[{"source":"CNA","time":"2026-11-03T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"source":"CNA","time":"2026-11-03T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"source":"CNA","time":"2026-11-03T15:44:01.000Z","lang":"en","value":"VulDB entry last update"}],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"waterhunter (VulDB User)","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"cpes":["cpe:2.3:a:miroslavpejic85:mirotalk_p2p:*:*:*:*:*:*:*:*"],"modules":["Socket IO Handler"],"product":"MiroTalk P2P","vendor":"miroslavpejic85","versions":[{"status":"affected","version":"2.0.0"},{"status":"affected","version":"2.0.1"},{"status":"affected","version":"2.0.2"},{"status":"affected","version":"2.0.3"},{"status":"affected","version":"2.0.4"},{"status":"affected","version":"2.0.5"},{"status":"affected","version":"2.0.6"},{"status":"affected","version":"2.0.7"},{"status":"affected","version":"2.0.8"},{"status":"affected","version":"2.0.9"},{"status":"affected","version":"2.0.10"},{"status":"affected","version":"2.0.11"},{"status":"affected","version":"2.0.12"},{"status":"affected","version":"2.0.13"},{"status":"affected","version":"2.0.14"},{"status":"affected","version":"2.0.15"},{"status":"affected","version":"2.0.16"},{"status":"affected","version":"2.0.17"},{"status":"affected","version":"2.0.18"},{"status":"affected","version":"2.0.19"},{"status":"affected","version":"2.0.20"},{"status":"affected","version":"2.0.21"},{"status":"affected","version":"2.0.22"},{"status":"affected","version":"2.0.23"},{"status":"affected","version":"2.0.24"},{"status":"affected","version":"2.0.25"},{"status":"affected","version":"2.0.26"},{"status":"affected","version":"2.0.27"},{"status":"affected","version":"2.0.28"},{"status":"affected","version":"2.0.29"},{"status":"affected","version":"2.0.30"},{"status":"affected","version":"2.0.31"},{"status":"affected","version":"2.0.32"},{"status":"affected","version":"2.0.33"},{"status":"affected","version":"2.0.34"},{"status":"affected","version":"2.0.35"},{"status":"affected","version":"2.0.36"},{"status":"affected","version":"2.0.37"},{"status":"affected","version":"2.0.38"},{"status":"affected","version":"2.0.39"},{"status":"affected","version":"2.0.40"},{"status":"affected","version":"2.0.41"},{"status":"affected","version":"2.0.42"},{"status":"affected","version":"2.0.43"},{"status":"affected","version":"2.0.44"},{"status":"affected","version":"2.0.45"},{"status":"affected","version":"2.0.46"},{"status":"affected","version":"2.0.47"},{"status":"affected","version":"2.0.48"},{"status":"affected","version":"2.0.49"},{"status":"affected","version":"2.0.50"},{"status":"affected","version":"2.0.51"},{"status":"affected","version":"2.0.52"},{"status":"affected","version":"2.0.53"},{"status":"affected","version":"2.0.54"},{"status":"affected","version":"2.0.55"},{"status":"affected","version":"2.0.56"},{"status":"affected","version":"2.0.57"},{"status":"affected","version":"2.0.58"},{"status":"affected","version":"2.0.59"},{"status":"affected","version":"2.0.60"},{"status":"affected","version":"2.0.61"},{"status":"affected","version":"2.0.62"},{"status":"affected","version":"2.0.63"},{"status":"affected","version":"2.0.64"},{"status":"affected","version":"2.0.65"},{"status":"affected","version":"2.0.66"},{"status":"affected","version":"2.0.67"},{"status":"affected","version":"2.0.68"},{"status":"affected","version":"2.0.69"},{"status":"affected","version":"2.0.70"},{"status":"affected","version":"2.0.71"},{"status":"affected","version":"2.0.72"},{"status":"affected","version":"2.0.73"},{"status":"affected","version":"2.0.74"},{"status":"affected","version":"2.0.75"},{"status":"affected","version":"2.0.76"},{"status":"affected","version":"2.0.77"},{"status":"affected","version":"2.0.78"},{"status":"affected","version":"2.0.79"},{"status":"affected","version":"2.0.80"},{"status":"affected","version":"2.0.81"},{"status":"affected","version":"2.0.82"},{"status":"affected","version":"2.0.83"},{"status":"affected","version":"2.0.84"},{"status":"affected","version":"2.0.85"},{"status":"affected","version":"2.0.86"},{"status":"affected","version":"2.0.87"},{"status":"affected","version":"2.1.0"},{"status":"affected","version":"2.1.1"},{"status":"affected","version":"2.1.2"},{"status":"affected","version":"2.1.3"},{"status":"affected","version":"2.1.4"},{"status":"affected","version":"2.1.5"},{"status":"affected","version":"2.1.6"},{"status":"affected","version":"2.1.7"},{"status":"affected","version":"2.1.8"},{"status":"affected","version":"2.1.9"},{"status":"affected","version":"2.1.10"},{"status":"affected","version":"2.1.11"},{"status":"affected","version":"2.1.12"},{"status":"affected","version":"2.1.13"},{"status":"affected","version":"2.1.14"},{"status":"affected","version":"2.1.15"},{"status":"affected","version":"2.1.16"},{"status":"affected","version":"2.1.17"},{"status":"affected","version":"2.1.18"},{"status":"affected","version":"2.1.19"},{"status":"affected","version":"2.1.20"},{"status":"affected","version":"2.1.21"},{"status":"affected","version":"2.1.22"},{"status":"affected","version":"2.1.23"},{"status":"affected","version":"2.1.24"},{"status":"affected","version":"2.1.25"},{"status":"affected","version":"2.1.26"},{"status":"affected","version":"2.1.27"},{"status":"affected","version":"2.1.28"},{"status":"affected","version":"2.1.29"},{"status":"affected","version":"2.1.30"},{"status":"affected","version":"2.1.31"},{"status":"affected","version":"2.1.32"},{"status":"affected","version":"2.1.33"},{"status":"affected","version":"2.1.34"},{"status":"affected","version":"2.1.35"},{"status":"affected","version":"2.1.36"},{"status":"affected","version":"2.1.37"},{"status":"affected","version":"2.1.38"},{"status":"unaffected","version":"2.1.39"}]}],"credits":[{"lang":"en","type":"reporter","value":"waterhunter (VulDB User)"}],"descriptions":[{"lang":"en","value":"A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component."}],"metrics":[{"cvssV4_0":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","version":"4.0"}},{"cvssV3_1":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","version":"3.1"}},{"cvssV3_0":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","version":"3.0"}},{"cvssV2_0":{"baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C","version":"2.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"Improper Access Controls","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-266","description":"Incorrect Privilege Assignment","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-03T22:30:15.617Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB"},"references":[{"name":"VDB-430300 | miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/430300"},{"name":"VDB-430300 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/430300/cti"},{"name":"CVE-2026-121539 | CVE Analysis and Report","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-121539"},{"name":"Submit #1019996 | miroslavpejic85 MiroTalk P2P 2.0.87 Improper Access Control","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/1019996"},{"tags":["related"],"url":"https://github.com/waterhunter2000-svg/vulnerability-reports"},{"tags":["patch"],"url":"https://github.com/miroslavpejic85/mirotalk/commit/4e40471abc48bfc32b4b174b8844716dfc5c1471"}],"tags":["x_open-source"],"timeline":[{"lang":"en","time":"2026-11-03T00:00:00.000Z","value":"Advisory disclosed"},{"lang":"en","time":"2026-11-03T01:00:00.000Z","value":"VulDB entry created"},{"lang":"en","time":"2026-11-03T15:44:01.000Z","value":"VulDB entry last update"}],"title":"miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control","x_generator":["VulDB PVTS v202611"]}},"cveMetadata":{"assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","assignerShortName":"VulDB","cveId":"CVE-2026-121539","datePublished":"2026-11-03T22:30:15.617Z","dateReserved":"2026-11-03T14:38:55.431Z","dateUpdated":"2026-11-03T22:30:15.617Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-03 23:17:34","lastModifiedDate":"2026-11-03 23:17:34","problem_types":["CWE-266","CWE-284","CWE-284 Improper Access Controls","CWE-266 Incorrect Privilege Assignment"],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"121539","Ordinal":"1","Title":"miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword ","CVE":"CVE-2026-121539","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"121539","Ordinal":"1","NoteData":"A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component.","Type":"Description","Title":"miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword "}]}}}