As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-115748: Apache Vysper: Authorization bypass
CVE-2026-115748 is an authorization bypass in Apache Vysper affecting all versions. The XEP-0077 (In-Band Registration) implementation lacks an authentication check, permitting any authenticated user to compromise other accounts.
Why it matters: Organizations running Apache Vysper XMPP servers face account compromise risk: any authenticated user can take over other accounts, requiring immediate assessment and patching of affected deployments.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-115748: Apache Vysper: Authorization bypass
Apache Vysper, an XMPP server library, contains an authorization bypass vulnerability in its XEP-0077 In-Band Registration implementation that allows any authenticated user to compromise other accounts. All versions are affected. The vulnerability carries a CVSS 3.1 score of 8.8.
Why it matters: Organizations running Apache Vysper for XMPP messaging should audit account compromise risk and apply patches when available, as authenticated attackers can exploit the missing authentication check to take over user accounts.
- Source published
- First seen by Cybersecurity Tracker