Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId/* endpoint that allows unauthenticated attackers to trigger consistent 500 errors. Remote attackers can send OPTIONS requests to bypass authentication middleware and invoke tusProxy logic with invalid credentials, enabling trivial request flooding and denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56299 Authentication Bypass in Capgo Before 12.128.2 Enables Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56299
Post summary
The post announces an authentication‑bypass vulnerability in Capgo versions earlier than 12.128.2 that can lead to denial of service, but it does not mention PoC, exploit code, or active exploitation, and no patch or mitigation is cited.