Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy configuration. An authenticated organization administrator can set an extremely large numeric value (e.g., billions of characters) as the minimum password length, making compliance impossible for all organization members. Once the policy is enabled, users (including administrators) are unable to change their passwords or access the organization, resulting in an organization-wide account lockout and application-level denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56228 Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy configuration. An authenticated organization admini… https://www.cve.org/CVERecord?id=CVE-2026-56228
Post summary
The snippet highlights a vulnerability in Capgo’s password policy that allows weak passwords but provides no details on exploits, patches, or active attacks.
CVE-2026-56228 Authentication Bypass and Denial of Service in Capgo Before 12.128.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56228
Post summary
CVE-2026-56228 is a disclosed authentication bypass and DoS flaw affecting Capgo versions older than 12.128.2, with no PoC, exploit, or remediation details provided.
🚨*CVE* CVE-2026-56228 Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy configuration. An authenticated organization admini… https://www.cve.org/CVERecord?id=CVE-2026-56228 ----- Traducción: CVE-2026-56228 Cap… http://infoflow.cloud`
Post summary
Brief CVE record indicates Capgo’s password policy flaw; no PoC, exploit, or patch information is provided.