Security Advisory

CVE-2026-53867

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-12 21:57:02

Last updated 2026-07-14 21:33:46

Assigner VulnCheck

CVSS score 5.3

State PUBLISHED

Description

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded content.

← Browse all CVEs View on cve.org ↗