CVE-2026-15542

HIGH

will-moss Isaiah Websocket Connection Authentication main.go improper authentication

Title source: cna
STIX 2.1

Description

A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. The attack can be initiated remotely. The pull request to fix this issue awaits acceptance.

References (7)

Core 7
Core References
Vdb Entry vdb-entry
VDB-377892 | will-moss Isaiah Websocket Connection Authentication main.go improper authentication
https://vuldb.com/vuln/377892
Signature, Permissions Required signature permissions-required
VDB-377892 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/377892/cti
Third Party Advisory third-party-advisory
CVE-2026-15542 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-15542
Third Party Advisory third-party-advisory
Submit #855075 | will-moss Isaiah 1.36.9 CWE-287 Improper Authentication
https://vuldb.com/submit/855075
Issue Tracking issue-tracking
https://github.com/will-moss/isaiah/issues/33
Patch issue-tracking patch
https://github.com/will-moss/isaiah/pull/36

Scores

CVSS v3 7.3
EPSS 0.0040
EPSS Percentile 33.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-287
Status published
Products (10)
will-moss/Isaiah 1.36.0
will-moss/Isaiah 1.36.1
will-moss/Isaiah 1.36.2
will-moss/Isaiah 1.36.3
will-moss/Isaiah 1.36.4
will-moss/Isaiah 1.36.5
will-moss/Isaiah 1.36.6
will-moss/Isaiah 1.36.7
will-moss/Isaiah 1.36.8
will-moss/Isaiah 1.36.9
Published Jul 13, 2026
Tracked Since Jul 13, 2026