PT-2026-48935 · Cap Go · Capgo Console

·

CVE-2026-53982

·

Published

2026-06-12

·

Updated

2026-06-16

CVSS v4.0

7.1

High

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Capgo Console versions prior to 12.28.2
Description A denial-of-service issue exists in the account deletion flow. An attacker can block authentication and onboarding functions by triggering account deletion while a device identifier is linked to the active session. The platform incorrectly associates the deletion state with the device identifier, which causes the affected device or browser environment to be redirected to an account-disabled page for approximately 30 days, preventing any account login or registration from that device.
Recommendations Update to version 12.28.2 or later.

Exploit

Fix

DoS

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-53982
GHSA-QMRM-QGWR-55JF

Affected Products

Capgo Console