CVE-2026-56238

creationtimestamp| type| source ---|---|--- 2026-07-12 12:31:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6ohgm362f 2026-07-12 13:27:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhbrsqsvs2x 2026-07-12 14:01:17+00:00| seen|...

CVE-2026-56238 Capgo - Unauthenticated Information Disclosure via PostgREST global_stats Endpoint

Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST globalstats endpoint that allows unauthenticated attackers to read sensitive financial and operational metrics using only the public apikey. Remote attackers can query the /rest/v1/globalstats endpoin...