How many CVEs does Cap-go have?

Cap-go has 103 published CVE records since 2026, including 103 in the last two years.

How many Cap-go CVEs are in CISA KEV?

None of Cap-go's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Cap-go products have the most CVEs?

The Cap-go products with the most published CVEs are capgo, Cap-go.

What are the most common weakness types in Cap-go CVEs?

Cap-go's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-285 (Improper Authorization), CWE-284 (Improper Access Control), CWE-287 (Improper Authentication).

Are there public exploits for Cap-go vulnerabilities?

Yes — 90 of Cap-go's CVEs have a known public exploit.

How many critical Cap-go vulnerabilities are there?

Cap-go has 4 critical and 52 high-severity CVEs.

What is the average severity of Cap-go CVEs?

The average CVSS base score across Cap-go's scored CVEs is 7.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

103 CVEs

Cap-go Vulnerabilities

Name: Cap-go vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Cap-go.

103

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

90

Public exploits

PoC or exploit code

7.1

Avg CVSS

2026–2026

Overview

Cap-go has 103 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 90 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Cap-go products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Cap-go's vulnerability posture, as a share of its 103 published CVEs.

Average CVSS: 7.1
Critical / high: 54%
Actively exploited (KEV): 0%
Public exploit available: 87%
Patch available: 100%

Severity and exploitation

How the CVSS severity of Cap-go's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High52

Medium46

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Cap-go's CVEs are currently listed in CISA's KEV catalog.

Public exploits

90

90 of Cap-go's CVEs have a known public exploit available.

Most affected products

The Cap-go products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Cap-go CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Cap-go CVE records.

VulnCheck103 CVEs

Latest Cap-go CVEs

The most recently disclosed vulnerabilities affecting Cap-go.

Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC
CWE-203
High · CVSS 8.7
EPSS 0.3%2026-07-15
Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint
CWE-200
Medium · CVSS 6.9
EPSS 0.2%2026-07-12
Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint
CWE-285
High · CVSS 7.2
EPSS 0.3%2026-07-12
Capgo - Insufficient Authentication in Email Change Endpoint
CWE-640
High · CVSS 8.4
EPSS 0.2%2026-07-12
Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint
CWE-89
Medium · CVSS 5.1
EPSS 0.2%2026-07-12
Capgo - Scope Isolation Failure in Webhook Test Endpoint
CWE-863
Medium · CVSS 5.3
EPSS 0.2%2026-07-12
Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_right
CWE-285
High · CVSS 7.2
EPSS 0.2%2026-07-12
Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint
CWE-200
High · CVSS 8.7
EPSS 0.4%2026-07-12
Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function
CWE-200
High · CVSS 8.7
EPSS 0.3%2026-07-11
Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC
CWE-203
Medium · CVSS 6.9
EPSS 0.2%2026-07-11
Capgo - Billing Authorization Bypass via Exhausted Usage Credits
CWE-285
Medium · CVSS 5.3
EPSS 0.2%2026-07-11
Capgo - Channel Configuration Mutation via Write-Scoped API Keys
CWE-284
High · CVSS 7.1
EPSS 0.3%2026-07-10

Track new Cap-go CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Cap-go CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Ashlar-Vellum104 CVEs MB connect line104 CVEs theforeman104 CVEs Artica103 CVEs Crocoblock103 CVEs wpdevteam103 CVEs Dassault Systèmes102 CVEs mi102 CVEs

Browse all vendors

Frequently asked questions

Common questions about Cap-go vulnerabilities.

How many CVEs does Cap-go have?: Cap-go has 103 published CVE records since 2026, including 103 in the last two years.
How many Cap-go CVEs are in CISA KEV?: None of Cap-go's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Cap-go products have the most CVEs?: The Cap-go products with the most published CVEs are capgo, Cap-go.
What are the most common weakness types in Cap-go CVEs?: Cap-go's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-285 (Improper Authorization), CWE-284 (Improper Access Control), CWE-287 (Improper Authentication).
Are there public exploits for Cap-go vulnerabilities?: Yes — 90 of Cap-go's CVEs have a known public exploit.
How many critical Cap-go vulnerabilities are there?: Cap-go has 4 critical and 52 high-severity CVEs.
What is the average severity of Cap-go CVEs?: The average CVSS base score across Cap-go's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Cap-go vulnerabilities

Monitor new Cap-go vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing