CVE-2026-56283
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
50/100
Published: 2026-07-08
Modified: 2026-10-25
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
Active
S:
X
AT:
None
VC:
Low
VI:
Low
VA:
None
Description
Capgo before 12.128.2 contains an html injection vulnerability in the organization settings endpoint that allows attackers to inject malicious HTML content. Attackers can craft payloads in the organization name field to redirect users to untrusted websites, enabling phishing attacks and reputational damage.