Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that allows unauthenticated attackers to enumerate organization members. Attackers can invoke the endpoint using only the public sb_publishable_* key and an organization UUID to retrieve sensitive member information including email addresses, user IDs, roles, and pending invitations.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56253 Unauthenticated Organization Member Enumeration in Capgo Before 12.128.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56253
Post summary
The text identifies CVE-2026-56253 as an unauthenticated organization member enumeration flaw in Capgo prior to v12.128.2, but offers no PoC, exploit details, patch information, or evidence of active exploitation.