CVE-2026-56286

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2

Description An authentication bypass exists in the account deletion endpoint. This flaw allows the deletion of user accounts without requiring password re-authentication or secondary verification. Exploitation can occur through session hijacking, Cross-Site Request Forgery (CSRF) attacks, or parameter tampering, leading to unauthorized account deletion, data loss, and denial-of-service.

Recommendations Update to version 12.128.2 or later.