CVE-2026-53868Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then initiate deletion to lock emails in pending deletion state. Attackers can permanently lock legitimate users out of the platform for 30 days by exploiting unverified email ownership in account lifecycle operations.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-06-13); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-53868

Classification over time

Date	Total	Labels

2026-06-13	1	Disclosure1
2026-06-14	1	Patch1

Full discourse2 posts

NerdieNews@NewsNerdie136d
Patch
⚠️ Attackers can exploit CVE-2026-53868 in Capgo < 12.128.2 to launch denial-of-service attacks via unverified email registrations. This disrupts services entirely. Patch immediately to prevent exploitation. #NerdieNews #CyberSecurity #Vulnerability https://t.co/2WtxBC1ewA
Post summary
The tweet warns that attackers can exploit CVE-2026-53868 to cause a denial-of-service, detailing the affected version and vector, and urges that a patch be applied immediately.
00000171
65 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2026-53868 Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register accounts using arbitrary email addresses without verification, then in… https://www.cve.org/CVERecord?id=CVE-2026-53868
Post summary
The text announces a denial-of-service vulnerability in Capgo versions prior to 12.128.2, detailing how attackers can create accounts with arbitrary emails.
00000346
57.6K followersView on X

Explore more

Back to dashboard