Improper Authentication in MiroTalk P2P by miroslavpejic85
CVE-2026-121535

6.3MEDIUM

Key Information:

Vendor

Miroslavpejic85

Status
Mirotalk P2p
Vendor
CVE Published:
3 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-121535?

A vulnerability exists in MiroTalk P2P prior to version 2.0.87, which impacts the Room Action Handler's checkPassword function. This flaw allows for excessive authentication attempts, opening doors to potential unauthorized access. Remote attackers can exploit this vulnerability, although the complexity of executing such attacks remains high. A patch is available in version 2.1.38, and upgrading is recommended for all users to secure their systems against these potential threats.

Affected Version(s)

MiroTalk P2P 2.0.0

MiroTalk P2P 2.0.1

MiroTalk P2P 2.0.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-121535 - Proof of Concept

References

https://vuldb.com/vuln/430291
vdb-entrytechnical-description
https://vuldb.com/vuln/430291/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-121535
third-party-advisory

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

waterhunter (VulDB User)
.