Read the docs

devlive-community

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

devlive-community records in CISA KEV

No devlive-community vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-83128 CVE-2026-119654 · GHSA-3c4r-whrm-5953

DataCap Privilege Escalation via allocationRole Missing Authorization

Priority HIGH 73

DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privileges by calling administrative role and menu management APIs.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00499 Published 2026-10-30 No fix listed CWE-862
TI-2026-75400 CVE-2026-111614 · GHSA-pp2x-5mgr-8c5h

Insecure direct object reference in DataCap exposes credentials

Priority MEDIUM 64

DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00386 Published 2026-10-16 No fix listed CWE-639
Open these records in search →