https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:17:21.835348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-56325 CVE-2026-56325 — Capgo - App ID Confusion via ILIKE Wildcard in Preview Subdomain Lookup 2026-10-10T11:17:21.850764+00:00

Affected: Capgo

Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolver, allowing underscore characters in app_id to act as SQL wildcards. Attackers can create apps with app_ids differing by one character at underscore positions to cause unintended pattern matches, breaking preview functionality for legitimate apps or causing app-id confusion.