Zurück zur CVE-Übersicht
CVE-2026-56308
HIGH(7.3)CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Risk Signal Score28/100 — MITTEL
- CVSS 7.3 — Hoch
- Weniger als 24 Stunden alt
Beschreibung
Capgo before 12.128.2 allows email address changes without requiring current password re-authentication or verification of the existing email address. An attacker with access to a valid session cookie or authenticated browser can change the account email to gain control of account recovery and bypass multi-factor authentication protections.