Product by Cap-go

    Capgo

    17 known vulnerabilities in Capgo (Cap-go), 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Capgo (Cap-go)
    CriticalCVE-2026-56081

    Cap-go - Account Lockout via 2FA Misconfiguration on Unverified Email

    		9.1
    HighCVE-2026-56248

    Capgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy

    		7.5
    HighCVE-2026-56339

    Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC

    		7.5
    HighCVE-2026-56082

    Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPC

    		7.5
    HighCVE-2026-56245

    Capgo: Improper Privilege Management

    		8.2
    HighCVE-2026-56226

    Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC

    		7.5
    CriticalCVE-2026-56073

    Cap-go - OTP Bypass via Response Manipulation in Email Verification

    		9.4
    HighCVE-2026-56221

    Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.ts

    		6.5
    MediumCVE-2026-56080

    Cap-go - Authentication Logic Flaw in Enforce Password Policy

    		4.9
    MediumCVE-2026-56235

    Capgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC Functions

    		5.3
    HighCVE-2026-53982

    Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier Association

    		6.5
    HighCVE-2026-56280

    Cap-go - Privilege Inversion in Build Log Stream via SSE Disconnect

    		7.1
    MediumCVE-2026-56296

    Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC

    		5.3
    MediumCVE-2026-56316

    Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*

    		5.3
    MediumCVE-2026-56284

    Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPC

    		5.3
    MediumCVE-2026-56307

    Cap-go - Broken Cursor Pagination in /private/devices Endpoint

    		4.3
    MediumCVE-2026-56310

    Cap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope Bypass

    		4.3

    All products by Cap-go