Beveiligingsadvies

CVE-2026-56339

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-15 11:25:27

Laatst bijgewerkt 2026-07-15 18:38:40

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST SECURITY DEFINER RPC function public.rescind_invitation that allows unauthenticated attackers to enumerate organization existence. The function returns distinct error messages (NO_ORG vs NO_RIGHTS) when called with only a publishable API key, enabling attackers to discover valid organization IDs and increase the attack surface for targeted phishing or social engineering campaigns.

← Alle CVE's bekijken Bekijk op cve.org ↗