CVE-2022-24259: Voipmonitor

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.

Affected products

• Voipmonitor Voipmonitor: before 24.96 (fixed in 24.96)

Published 2022-02-04. Last modified 2026-06-17.