CVE-2026-119654 | devlive-community DataCap up to 2025.1.1 Menu Management allocationRole improper authorization

October 30, 2026 Yanac

A vulnerability was found in devlive-community DataCap up to 2025.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/user/allocationRole of the component Menu Management. The manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-119654. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More