A vulnerability was found in Rupeeseed Technology Ventures RupeeWeb prior 66.9. It has been rated as critical. Affected by this issue is some unknown functionality of the component API Endpoint. The manipulation leads to incorrect privilege assignment.

This vulnerability is handled as CVE-2025-26523. The attack may be launched remotely. There is no exploit available.