Skip to content
OpenAdvisories

Vendor

CapSoftware

1 known vulnerabilities.

Products

Cap 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-69113

    Cap v0.3.1 Broken Access Control via video comment endpoint

    Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authenticated users to post comments on any private video without permission by supplying an arbitrary videoId in the request body. Attackers can inj…

    CapSoftware Cap