Skip to content
OpenAdvisories

Product · devlive-community

DataCap

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-119654

    DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization

    DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privileges by calling administrative role and menu management APIs. Attackers, including self-registered accounts, can send PUT requests to …

    devlive-community DataCap