Session Expiration Vulnerability in Eleveo Call Recording Software
CVE-2026-108809

5.1MEDIUM

Key Information:

Vendor

Eleveo

Status
Call Recording Software
Vendor
CVE Published:
12 October 2026

What is CVE-2026-108809?

A vulnerability exists in Eleveo Call Recording Software versions up to 10.3.0 that allows for session expiration due to improper processing of log out requests. The flaw affects the handling of the OpenID Connect logout protocol, potentially enabling remote exploitation. Despite early disclosure to the vendor, there has been no response. As this exploit is publicly available, users of the affected software are advised to review their security measures.

Affected Version(s)

Call Recording Software 10.0

Call Recording Software 10.1

Call Recording Software 10.2

References

https://vuldb.com/vuln/416586
vdb-entry
https://vuldb.com/vuln/416586/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108809
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ozataknurullah (VulDB User)
VulDB CNA Team
.