Is CVE-2026-15542 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15542?

CVE-2026-15542 has a CVSS v3 severity of HIGH (7.3).

Back

CVE-2026-15542

Description

A vulnerability has been found in will-moss Isaiah up to 1.36.9. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. The attack can be initiated remotely. The pull request to fix this issue awaits acceptance.