CVE-2026-115748

UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP Jabber server library. Its XEP-0077 In-Band Registration implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As this project is...

CVE-2026-115748 Apache Vysper: Authorization bypass

UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP Jabber server library. Its XEP-0077 In-Band Registration implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As this project is...

EUVD-2026-109916

UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP Jabber server library. Its XEP-0077 In-Band Registration implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As this project is...

CVE-2026-115748

Apache Vysper, an XMPP (Jabber) server library, is vulnerable to an authorization bypass in all versions. The issue stems from the XEP-0077 (In-Band Registration) implementation, which lacks a necessary authentication check. This allows any authenticated user to compromise other accounts . Becaus...