CVE-2026-53982: Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier Association
Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block authentication and onboarding functions by triggering account deletion while a device identifier is linked to the active session. The platform incorrectly associates the deletion state with the device identifier, causing the affected device or browser environment to be redirected to an account-disabled page for approximately 30 days, preventing any account login or registration from that device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cap-go Consoleto a version that resolves this vulnerability.Fixed in 12.28.2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53982?
The severity of CVE-2026-53982 is rated as medium with a score of 6.5.
How do I fix CVE-2026-53982?
To fix CVE-2026-53982, upgrade Capgo Console to version 12.28.2 or later.
What type of vulnerability is CVE-2026-53982?
CVE-2026-53982 is a denial-of-service (DoS) vulnerability.
What impact does CVE-2026-53982 have on Capgo users?
CVE-2026-53982 can block authentication and onboarding functions for Capgo users.
Who is affected by CVE-2026-53982?
All users of Capgo Console versions prior to 12.28.2 are affected by CVE-2026-53982.