https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:27:31.811948+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335691 EUVD-2026-335691 2026-10-07T13:27:31.870367+00:00 EUVD-2026-335691 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56312 fkie_cve-2026-56312 2026-10-07T13:27:31.870404+00:00

Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation endpoint that creates user accounts before captcha validation is enforced. Attackers can bypass captcha protection by sending POST requests with invalid captcha tokens to create unwanted accounts and burn invite links.

 https://cve.radiocsirt.org/vuln/ghsa-pj32-crq8-r292 GHSA-pj32-crq8-r292 2026-10-07T13:27:31.870437+00:00

Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation endpoint that creates user accounts before captcha validation is enforced. Attackers can bypass captcha protection by sending POST requests with invalid captcha tokens to create unwanted accounts and burn invite links.