Capgo vulnerabilities

Newest CVEs

• CVE-2026-56336

  Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint

  Capgo · Capgo

  Medium6.9
• CVE-2026-56313

  Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint

  Capgo · Capgo

  High7.2
• CVE-2026-56308

  Capgo - Insufficient Authentication in Email Change Endpoint

  Capgo · Capgo

  High8.4
• CVE-2026-56281

  Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint

  Capgo · Capgo

  Medium5.1
• CVE-2026-56252

  Capgo - Scope Isolation Failure in Webhook Test Endpoint

  Capgo · Capgo

  Medium5.3
• CVE-2026-56241

  Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_right

  Capgo · Capgo

  High7.2
• CVE-2026-56238

  Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint

  Capgo · Capgo

  High8.7
• CVE-2026-56303

  Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function

  Capgo · Capgo

  High8.7
• CVE-2026-56240

  Capgo - Billing Authorization Bypass via Exhausted Usage Credits

  Capgo · Capgo

  Medium5.3
• CVE-2026-56335

  Capgo - Channel Configuration Mutation via Write-Scoped API Keys

  Capgo · Capgo

  High7.1