CVE-2026-56215 - Capgo - Account Merge via Poisoned public.users.email in SSO Provisioning
CVE ID :CVE-2026-56215 Published : June 20, 2026, 12:14 a.m. | 55 minutes ago Description :Capgo before 12.128.12 allows authenticated users to modify their mutable public.users.email to arbitrary addresses, which the SSO provisioning endpoint trusts as an account-merge key. Attackers can...