CVE-2026-121535

LOW 3.7

miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication

CVSS Score

3.7

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file app/src/server.js of the component Room Action Handler. The manipulation results in improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The exploit has been made public and could be used. Upgrading to version 2.1.38 is able to resolve this issue. The patch is identified as 55bec1d05f931d2e43633d6d0b7274f79ec719dd. Upgrading the affected component is advised.

CWE	CWE-307 CWE-799
Vendor	miroslavpejic85
Product	mirotalk p2p
Published	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for miroslavpejic85 mirotalk p2p

Be the first to know when new low vulnerabilities affecting miroslavpejic85 mirotalk p2p are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

miroslavpejic85 / MiroTalk P2P

2.0.0 2.0.1 2.0.2 2.0.3 2.0.4 2.0.5 2.0.6 2.0.7 2.0.8 2.0.9 2.0.10 2.0.11 2.0.12 2.0.13 2.0.14 2.0.15 2.0.16 2.0.17 2.0.18 2.0.19 2.0.20 2.0.21 2.0.22 2.0.23 2.0.24 2.0.25 2.0.26 2.0.27 2.0.28 2.0.29 2.0.30 2.0.31 2.0.32 2.0.33 2.0.34 2.0.35 2.0.36 2.0.37 2.0.38 2.0.39 2.0.40 2.0.41 2.0.42 2.0.43 2.0.44 2.0.45 2.0.46 2.0.47 2.0.48 2.0.49 2.0.50 2.0.51 2.0.52 2.0.53 2.0.54 2.0.55 2.0.56 2.0.57 2.0.58 2.0.59 2.0.60 2.0.61 2.0.62 2.0.63 2.0.64 2.0.65 2.0.66 2.0.67 2.0.68 2.0.69 2.0.70 2.0.71 2.0.72 2.0.73 2.0.74 2.0.75 2.0.76 2.0.77 2.0.78 2.0.79 2.0.80 2.0.81 2.0.82 2.0.83 2.0.84 2.0.85 2.0.86 2.0.87

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/430291 vuldb.com: https://vuldb.com/vuln/430291/cti vuldb.com: https://vuldb.com/cve/CVE-2026-121535 vuldb.com: https://vuldb.com/submit/1019995 github.com: https://github.com/waterhunter2000-svg/vulnerability-reports github.com: https://github.com/miroslavpejic85/mirotalk/security/advisories/GHSA-x2r2-j5hf-hp36 github.com: https://github.com/waterhunter2000-svg/vulnerability-reports/blob/main/04-mirotalk-checkpassword-oracle.md github.com: https://github.com/miroslavpejic85/mirotalk/commit/55bec1d05f931d2e43633d6d0b7274f79ec719dd

Credits

🔍 waterhunter (VulDB User)