CVE-2026-56332 – Capgo – Open Redirect via confirmation_url Parameter

CVE ID :CVE-2026-56332

Published : June 20, 2026, 3:24 p.m. | 2 hours, 18 minutes ago

Description :Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary external websites. The confirmation_url parameter is not validated, enabling attackers to craft malicious links for phishing and credential harvesting attacks.

Severity: 5.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…