Vulnerabilidades en Capgo
83 resultadosAnálisis Vexday
Capgo apresenta 82 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando exposição recente e significativa. Embora nenhuma esteja sob ataque ativo no momento, apenas 2 são críticas, a fraqueza dominante é exposição de informações (CWE-200), sugerindo vazamento de dados como padrão de risco principal. A concentração de divulgações recentes demanda monitoramento contínuo para detecção precoce de exploração em larga escala.
CVE-2026-56333MEDIUMCapgo - Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings UpdatesEPSS 0.3%CVE-2026-56257HIGHCapgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST UpdateEPSS 0.3%CVE-2026-56320HIGHCapgo - Org/App Scope Mismatch in Device Creation EndpointEPSS 0.3%CVE-2026-56295MEDIUMCapgo - Policy Enforcement Bypass in Webhook Management Endpoints via Non-Expiring API KeysEPSS 0.3%CVE-2026-56231HIGHCapgo - Broken Object Level Authorization in Build Job Control via jobId ParameterEPSS 0.3%CVE-2026-56319MEDIUMCapgo - App Existence Oracle via GET /statistics/app/:app_idEPSS 0.3%CVE-2026-56298MEDIUMCapgo - EXIF Metadata Exposure in App Information Image UploadEPSS 0.3%CVE-2026-56240MEDIUMCapgo - Billing Authorization Bypass via Exhausted Usage CreditsEPSS 0.3%CVE-2026-56223CRITICALCapgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-userEPSS 0.3%CVE-2026-56332MEDIUMCapgo - Open Redirect via confirmation_url ParameterEPSS 0.3%CVE-2026-56217MEDIUMCapgo - Encrypted Bundle Policy Bypass via Direct PostgREST UpdateEPSS 0.3%CVE-2026-56252MEDIUMCapgo - Scope Isolation Failure in Webhook Test EndpointEPSS 0.3%CVE-2026-56224MEDIUMCapgo - Login CSRF and Session Fixation via URL Query ParametersEPSS 0.3%CVE-2026-56334MEDIUMCapgo - Missing UPDATE RLS Policy for Build Status PersistenceEPSS 0.3%CVE-2026-56227MEDIUMCapgo - Server-Side Request Forgery via Webhook URL ValidationEPSS 0.3%CVE-2026-53868HIGHCapgo < 12.128.2 - Denial of Service via Unverified Email Account Registration and DeletionEPSS 0.3%CVE-2026-56336MEDIUMCapgo - Information Disclosure via Unauthenticated SSO check-domain EndpointEPSS 0.3%CVE-2026-56330MEDIUMCapgo - Open Redirect via Unvalidated Stripe Billing URLsEPSS 0.3%CVE-2026-56281MEDIUMCapgo - SQL Injection via Unvalidated limit Parameter in Admin Stats EndpointEPSS 0.2%CVE-2026-56293MEDIUMCapgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()EPSS 0.2%