Cap-go capgo

• CVE-2026-56339 High 7.5 Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC 0.4%
• CVE-2026-56296 Medium 5.3 Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC 0.3%
• CVE-2026-56284 Medium 5.3 Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPC 0.3%
• CVE-2026-56226 High 7.5 Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC 0.3%
• CVE-2026-56310 Medium 4.3 Cap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope Bypass 0.2%
• CVE-2026-56245 High 8.2 Supabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPC 0.3%
• CVE-2026-56248 High 7.5 Capgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy 0.4%
• CVE-2026-56280 High 7.1 Cap-go - Privilege Inversion in Build Log Stream via SSE Disconnect 0.3%
• CVE-2026-56221 Medium 6.5 Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.ts 0.3%
• CVE-2026-56316 Medium 5.3 Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/* 0.3%
• CVE-2026-56307 Medium 4.3 Cap-go - Broken Cursor Pagination in /private/devices Endpoint 0.3%
• CVE-2026-56235 Medium 5.3 Capgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC Functions 0.3%
• CVE-2026-56082 High 7.5 Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPC 0.4%
• CVE-2026-56081 Critical 9.1 Cap-go - Account Lockout via 2FA Misconfiguration on Unverified Email 0.4%
• CVE-2026-56080 Medium 4.9 Cap-go - Authentication Logic Flaw in Enforce Password Policy 0.4%
• CVE-2026-56073 Critical 9.4 Cap-go - OTP Bypass via Response Manipulation in Email Verification 0.2%
• CVE-2026-53982 Medium 6.5 Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier Association 0.3%