VULNERABILITY INTELLIGENCE

CVE-2024-44730

CVSS score9.1 CRITICAL

EPSS probability0.43%

CISA KEVNot currently listed

Published2024-10-11

Last modified2026-06-17

Description

Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name.