Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Cap-go Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-88864`Capgo SSO Provider Authentication Bypass via PostgREST Direct Write	Exploitation statusPublic exploit	FixYes	Affected productNot confirmed	Published09/10/2026	SeverityCritical
`CVE-2026-88863`capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org	Exploitation statusNot known exploited	FixYes	Affected productcapgo.app	Published09/10/2026	SeverityHigh
`CVE-2026-88862`Capgo API Key Manager Authentication Bypass via x-limited-key-id	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published09/10/2026	SeverityHigh
`CVE-2026-88861`Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/10/2026	SeverityHigh
`CVE-2026-88860`Capgo Authorization Bypass via Stale Channel Permission Overrides	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/10/2026	SeverityCritical
`CVE-2026-56339`Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published07/15/2026	SeverityHigh
`CVE-2026-56296`Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published07/11/2026	SeverityMedium
`CVE-2026-56284`Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPC	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published07/08/2026	SeverityMedium
`CVE-2026-56226`Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published07/08/2026	SeverityHigh
`CVE-2026-56310`Cap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope Bypass	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/24/2026	SeverityMedium
`CVE-2026-56245`Supabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPC	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/24/2026	SeverityHigh
`CVE-2026-56248`Capgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/23/2026	SeverityHigh
`CVE-2026-56280`Cap-go - Privilege Inversion in Build Log Stream via SSE Disconnect	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/22/2026	SeverityHigh
`CVE-2026-56221`Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.ts	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/22/2026	SeverityHigh
`CVE-2026-56316`Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/21/2026	SeverityMedium
`CVE-2026-56307`Cap-go - Broken Cursor Pagination in /private/devices Endpoint	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/20/2026	SeverityMedium
`CVE-2026-56235`Capgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC Functions	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/20/2026	SeverityMedium
`CVE-2026-56082`Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPC	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/19/2026	SeverityHigh
`CVE-2026-56081`Cap-go - Account Lockout via 2FA Misconfiguration on Unverified Email	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/19/2026	SeverityCritical
`CVE-2026-56080`Cap-go - Authentication Logic Flaw in Enforce Password Policy	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/19/2026	SeverityMedium
`CVE-2026-56073`Cap-go - OTP Bypass via Response Manipulation in Email Verification	Exploitation statusPublic exploit	FixYes	Affected productcapgo	Published06/19/2026	SeverityCritical
`CVE-2026-53867`Capgo < 12.128.2 - Orphaned File Retention via Profile Image Replacement	Exploitation statusNot known exploited	FixYes	Affected productCapgo	Published06/12/2026	SeverityMedium
`CVE-2026-53982`Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier Association	Exploitation statusNot known exploited	FixYes	Affected productcapgo	Published06/12/2026	SeverityHigh
`CVE-2026-53981`Cap-go < v12.128.2 Account Takeover via Unauthenticated Email Change Mechanism	Exploitation statusPublic exploit	FixYes	Affected productCap-go	Published06/12/2026	SeverityHigh

24 / 24 Results

All vulnerabilities loaded

Security vulnerabilities from Cap-go

Cap-go

How many security vulnerabilities does Cap-go have?

Which Cap-go product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular Cap-go products

capgo

Cap-go

capgo.app