https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:48:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-329060 EUVD-2026-329060 https://cve.radiocsirt.org/vuln/euvd-2026-329060 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56081 <p>Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim&#39;s email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account claimed under the victim&#39;s identity, allowing them to read and modify its state and enforce organization-level policies, while the legitimate user is denied access to the account tied to their own email.</p> <p>Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim&#39;s email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account claimed under the victim&#39;s identity, allowing them to read and modify its state and enforce organization-level policies, while the legitimate user is denied access to the account tied to their own email.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56081 https://cve.radiocsirt.org/vuln/ghsa-9wvh-mc26-36xw <p>Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim&#39;s email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account claimed under the victim&#39;s identity, allowing them to read and modify its state and enforce organization-level policies, while the legitimate user is denied access to the account tied to their own email.</p> <p>Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a victim&#39;s email address before that email is verified. By enabling two-factor authentication on the pre-registered account, the attacker gains control over the account claimed under the victim&#39;s identity, allowing them to read and modify its state and enforce organization-level policies, while the legitimate user is denied access to the account tied to their own email.</p> https://cve.radiocsirt.org/vuln/ghsa-9wvh-mc26-36xw