Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Capgo before 12.128.2 contains a server-side validation bypass vulnerability in organization security settings that allows authenticated org admins to persist invalid security policy state. Attackers can bypass backend validation by directly updating the public.orgs table from the browser, circumventing field-level validation checks for max_apikey_expiration_days and other security-sensitive configuration parameters.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-56333 Server-Side Validation Bypass in Capgo Before 12.128.2 Organization Security Settings https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56333
Post summary
The text discloses a new server-side validation bypass vulnerability in Capgo versions prior to 12.128.2 affecting organization security settings.