CCapgo

Products

Exploited and recent CVEs

• CVE-2026-56336 Medium 5.3 Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint 0.3%
• CVE-2026-56313 High 8.1 Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint 0.5%
• CVE-2026-56308 High 7.3 Capgo - Insufficient Authentication in Email Change Endpoint 0.3%
• CVE-2026-56281 Low 3.8 Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint 0.3%
• CVE-2026-56252 Medium 5.4 Capgo - Scope Isolation Failure in Webhook Test Endpoint 0.2%
• CVE-2026-56241 High 8.3 Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_right 0.3%
• CVE-2026-56238 High 7.5 Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint 0.5%
• CVE-2026-56303 High 7.5 Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function 0.5%
• CVE-2026-56240 Medium 4.3 Capgo - Billing Authorization Bypass via Exhausted Usage Credits 0.2%
• CVE-2026-56335 Medium 6.5 Capgo - Channel Configuration Mutation via Write-Scoped API Keys 0.4%
• CVE-2026-56329 Medium 6.4 Capgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore Decoding 0.3%
• CVE-2026-56312 Medium 6.5 Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint 0.4%
• CVE-2026-56309 Medium 5.4 Capgo - Plan Bypass via Unrestricted Attachment Upload Endpoint 0.3%
• CVE-2026-56305 High 8.3 Capgo - Authentication Bypass in Password Change via Missing Current Password Validation 0.4%
• CVE-2026-56279 High 7.5 Capgo - Information Disclosure via get_orgs_v7 RPC Endpoint 0.4%
• CVE-2026-56298 Medium 4.3 Capgo - EXIF Metadata Exposure in App Information Image Upload 0.3%
• CVE-2026-56293 Medium 5.4 Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app() 0.2%
• CVE-2026-56283 Medium 5.4 Capgo - HTML Injection Leading to Open Redirection in Organization Settings 0.2%
• CVE-2026-56250 High 7.5 Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versions 0.5%
• CVE-2026-56246 High 8.1 Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege Inheritance 0.4%
• CVE-2026-56220 Medium 6.5 Capgo - Unauthorized Manifest Insertion via Read-Only Org Member 0.2%
• CVE-2026-56217 Medium 4.3 Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update 0.3%
• CVE-2026-56334 Medium 4.3 Capgo - Missing UPDATE RLS Policy for Build Status Persistence 0.3%
• CVE-2026-56333 Medium 4.3 Capgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updates 0.3%
• CVE-2026-56331 Medium 5.3 Capgo - Improper Error Handling in Accept Invitation Endpoint via Invalid Magic String 0.3%
• CVE-2026-56328 Medium 6.5 Capgo - Integrity Issue in Release Routing via Multiple Public Channels 0.3%
• CVE-2026-56327 Medium 5.3 Capgo - Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPC 0.3%
• CVE-2026-56320 High 7.1 Capgo - Org/App Scope Mismatch in Device Creation Endpoint 0.3%
• CVE-2026-56318 Medium 5.3 Capgo - Information Disclosure via /private/validate_password_compliance Endpoint 0.4%
• CVE-2026-56300 High 7.5 Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions 0.5%