Skip to content
OpenAdvisories

Vendor

devlive-community

2 known vulnerabilities.

Products

DataCap 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-119654

    DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization

    DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privileges by calling administrative role and menu management APIs. Attackers, including self-registered accounts, can send PUT requests to …

    devlive-community DataCap