PT-2026-57170 · Cap Go · Cap-Go
CVE-2026-56305
·
Published
2026-07-10
·
Updated
2026-07-10
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Capgo versions prior to 12.128.2
Description
An authentication bypass exists in the password change endpoint. This flaw allows attackers with temporary session access to change user passwords without providing the current password confirmation, potentially leading to full account takeover and the permanent lockout of legitimate users.
Recommendations
Update to version 12.128.2 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cap-Go