Vendor

    Cap-go

    42 known vulnerabilities in products by Cap-go, 0 of them actively exploited (CISA KEV).

    Key figures

    42

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cap-go
    HighCVE-2026-88861

    Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization

    		8.3
    HighCVE-2026-100622

    capgo.app through 12.129.0 Cache Restoration of Deleted Bundles

    		7.5
    HighCVE-2026-100623

    Capgo Authentication Bypass via Direct PostgREST org_users Table Write

    		8.8
    HighCVE-2026-100619

    Capgo OTA Manifest Poisoning via app_versions.manifest Bypass

    		8.8
    HighCVE-2026-100614

    Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker

    		8.8
    HighCVE-2026-88862

    Capgo API Key Manager Authentication Bypass via x-limited-key-id

    		8.8
    HighCVE-2026-100617

    Cap-go capgo.app Authorization Bypass via channel_permission_overrides

    		8.8
    HighCVE-2026-100615

    Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

    		8.8
    CriticalCVE-2026-88864

    Capgo SSO Provider Authentication Bypass via PostgREST Direct Write

    		9.1
    CriticalCVE-2026-56081

    Cap-go - Account Lockout via 2FA Misconfiguration on Unverified Email

    		9.1
    HighCVE-2026-88863

    capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org

    		8.1
    HighCVE-2026-100612

    Capgo SSO Provider ID Authentication Bypass via Incomplete Migration

    		7.2
    HighCVE-2026-100625

    Capgo Build Upload Proxy Authorization Bypass via TUS Resource

    		7.1
    CriticalCVE-2026-88860

    Capgo Authorization Bypass via Stale Channel Permission Overrides

    		6.3
    HighCVE-2026-100627

    Capgo bundle promotion API channel RBAC deny override bypass

    		8.1
    HighCVE-2026-56248

    Capgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy

    		7.5
    HighCVE-2026-100618

    Capgo App Icon Update Privilege Escalation via Service-Role Worker

    		8.5
    HighCVE-2026-100628

    capgo.app before 12.128.12 Authentication Bypass via apikey

    		4.3
    HighCVE-2026-56339

    Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC

    		7.5
    HighCVE-2026-56082

    Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPC

    		7.5
    HighCVE-2026-56245

    Capgo: Improper Privilege Management

    		8.2
    HighCVE-2026-56226

    Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC

    		7.5
    HighCVE-2026-100629

    Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH

    		5.5
    CriticalCVE-2026-56073

    Cap-go - OTP Bypass via Response Manipulation in Email Verification

    		9.4
    HighCVE-2026-100616

    capgo.app Authentication Bypass via PostgREST customer_id Mutation

    		5.5

    All vulnerabilities in search

    Products

    Products by Cap-go
    Capgo.app230
    Capgo170