Approved changes feed: RSS · Atom
cpe:2.3:a:cap-go:cap-go:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cap Go (d5077c67-2736-5d22-9441-c1a0e70fb2dc) |
|---|---|
| Product | Cap Go (b4386daf-344d-55cc-8ba9-ef6d6f7210b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-53981 |
vulnerable | 2026-07-29 01:00:27.375501 |
Cap-go < v12.128.2 Account Takeover via Unauthenticated Email Change Mechanism
HIGH (7.6)
Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary authenticated session access to change the registered email address without re-authentication such as password or MFA verification. Attackers can redirect verification to an attacker-controlled email address and subsequently perform a password reset to permanently take over the victim's account.
Published: 2026-06-12T15:42:18.383Z
Updated: 2026-06-12T17:24:22.841Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.