Insecure Direct Object Reference

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Capgo - Cross-Organization App Takeover via Mismatched org_id and app_id in /private/role_bindingsCVE-2026-56222Capgo · CVSS 7.2 · 0.5% likely

   CWE-639

2. Capgo - Broken Object Level Authorization via x-limited-key-id HeaderCVE-2026-56230Capgo · CVSS 8.8 · 0.5% likely

   CWE-639

3. Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata WorkerCVE-2026-100614Cap-go · CVSS 8.8 · 0.4% likely

   CWE-639

4. Capgo - Account Merge via Poisoned public.users.email in SSO ProvisioningCVE-2026-56215Capgo · CVSS 8.3 · 0.4% likely

   CWE-639

5. Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logsCVE-2026-56229Capgo · CVSS 6.5 · 0.4% likely

   CWE-639

6. Capgo bundle promotion API channel RBAC deny override bypassCVE-2026-100627Cap-go · CVSS 8.1 · 0.4% likely

   CWE-639

7. Capgo SSO Provider ID Authentication Bypass via Incomplete MigrationCVE-2026-100612Cap-go · CVSS 7.2 · 0.3% likely

   CWE-639

8. Capgo App Icon Update Privilege Escalation via Service-Role WorkerCVE-2026-100618Cap-go · CVSS 8.5 · 0.3% likely

   CWE-639

9. capgo through 12.128.2 IDOR via PUT /app icon endpointCVE-2026-100626Cap-go · CVSS 4.3 · 0.2% likely

   CWE-639

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.