CVE-2026-115748

A flaw was found in Apache Vysper. Its implementation of Extensible Messaging and Presence Protocol XMPP In-Band Registration lacks an authentication check. An authenticated remote attacker can exploit this vulnerability to compromise other user accounts on the server...