Is CVE-2026-56324 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56324?

CVE-2026-56324 has a CVSS v3 severity of HIGH (8.2).

Back

CVE-2026-56324

Description

Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channel_self endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled device_id parameter. Attackers can send multiple requests per second by changing device_id values to flood the channel_devices table and cause database exhaustion.