https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:02:06.594250+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-56318 CVE-2026-56318 — Capgo - Information Disclosure via /private/validate_password_compliance Endpoint 2026-10-10T14:02:06.595739+00:00

Affected: Capgo

Capgo before 12.128.2 contains an information disclosure vulnerability in the /private/validate_password_compliance endpoint that returns different error responses for malformed, non-existent, and existing organization IDs. Unauthenticated attackers can enumerate valid organization UUIDs by observing response status codes and error messages, allowing confirmation of organization existence.