Skip to content
Threat Feed
Subscribe

Vendor

Will-Moss

1 brief RSS
high advisory

CVE-2026-15541: Missing Authorization in will-moss Isaiah Master Websocket Handler

A critical missing authorization vulnerability (CVE-2026-15541) exists in the `Server.Handle` function of the `Master Websocket Handler` component within `will-moss Isaiah` versions up to 1.36.9, allowing a remote attacker to bypass authorization controls by manipulating the `Agent` argument, potentially leading to unauthorized access or privilege escalation.

Isaiah vulnerability authorization-bypass remote-code-execution
2t 1c