PT-2026-56431 · Cap Go · Cap-Go

Cyberheroes1010 · Publicado 2026-07-08 · Atualizado 2026-07-08 · CVE-2026-56283

NVD

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Capgo before 12.128.2 contains an html injection vulnerability in the organization settings endpoint that allows attackers to inject malicious HTML content. Attackers can craft payloads in the organization name field to redirect users to untrusted websites, enabling phishing attacks and reputational damage.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-56283

Produtos afetados

Cap-Go

Referências · 3

• 🔥 https://github.com/Cap-go/capgo/security/advisories/GHSA-vhvc-gxfh-m85g · Exploit
• https://vulncheck.com/advisories/capgo-html-injection-leading-to-open-redirection-in-organization-settings · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-56283 · Nota de Segurança