https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:19:36 +0000 https://cve.radiocsirt.org/vuln/cve-2026-56313 <p><strong>Affected:</strong> Capgo</p> <p>Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete password identities of users in foreign organizations. Attackers with org.update_settings permission and an active SSO provider can call the prelink-users endpoint to permanently remove email-based authentication for any user matching the provider&#39;s email domain, forcing victims to use the attacker&#39;s SSO provider or complete password reset recovery.</p> <p><strong>Affected:</strong> Capgo</p> <p>Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete password identities of users in foreign organizations. Attackers with org.update_settings permission and an active SSO provider can call the prelink-users endpoint to permanently remove email-based authentication for any user matching the provider&#39;s email domain, forcing victims to use the attacker&#39;s SSO provider or complete password reset recovery.</p> https://cve.radiocsirt.org/vuln/cve-2026-56313