CVE-2026-56324
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Jun 22, 2026
Vendor
unknown
Description
Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channel_self endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled device_id parameter. Attackers can send multiple requests per second by changing device_id values to flood the channel_devices table and cause database exhaustion.