Skip to content
Threat Feed
Subscribe

Tag

Supabase

1 brief RSS
high advisory

CVE-2026-56226 - Capgo Unauthenticated Data Exposure via Supabase PostgREST RPC

CVE-2026-56226 details a high-severity vulnerability in Capgo versions prior to 12.128.2 that exposes a Supabase PostgREST RPC function, `public.get_orgs_v6`, to unauthenticated attackers, allowing them to retrieve sensitive user organization membership and PII by supplying an arbitrary user UUID.

Capgo vulnerability api-exploitation data-exfiltration webserver supabase
1r 2t 1c