Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete password identities of users in foreign organizations. Attackers with org.update_settings permission and an active SSO provider can call the prelink-users endpoint to permanently remove email-based authentication for any user matching the provider's email domain, forcing victims to use the attacker's SSO provider or complete password reset recovery.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-56313](https://github.com/Cap-go/capgo/security/advisories/GHSA-x3vq-34gg-cwq7) Capgo b... https://github.com/Cap-go/capgo/security/advisories/GHSA-x3vq-34gg-cwq7 #CVE #ZeroDay #PatchManagement
Post summary
A new vulnerability (CVE-2026-56313) has been reported and a link to the GitHub security advisory was shared, but no further exploitation or patch details were provided.
🚨*CVE* CVE-2026-56313 Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete passw… https://www.cve.org/CVERecord?id=CVE-2026-56313 ----- Traducción: CVE-2026-56313 Cap… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-56313, a cross‑organization account disruption flaw in Capgo’s SSO prelink endpoint that could allow enterprise administrators to delete user passwords.
CVE-2026-56313 Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows enterprise administrators to delete passw… https://www.cve.org/CVERecord?id=CVE-2026-56313
Post summary
CVE-2026-56313 is a disclosed vulnerability in Capgo (versions before 12.128.2) that allows cross‑organization account disruption via the SSO prelink endpoint.