CVE-2026-96627 | getarcaneapp Arcane up to 2.5.x users.go UpdateUser privileges management

October 16, 2026 Yanac

A vulnerability, which was classified as critical, has been found in getarcaneapp Arcane up to 2.5.x. This issue affects the function UpdateUser of the file backend/api/handlers/users.go. This manipulation causes improper privilege management.

This vulnerability appears as CVE-2026-96627. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More