THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-56281 (LOW 3.8) — Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit parameter is destructured from unvalidated request body and interpolated directly into Cloudflare Analytics Engine SQL queries via template literals. An attacker

[NVD] CVE-2026-56281 (LOW 3.8) — Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit parameter is destructured from unvalidated request body and interpolated directly into Cloudflare Analytics Engine SQL queries via template literals. An attacker

lownvdPublished 2026-07-12

CVE-2026-56281 CVSS: 3.8 LOW Published: 2026-07-12T12:16:45.433

Capgo before 12.128.2 contains a sql injection vulnerability in the POST /private/admin_stats endpoint where the limit parameter is destructured from unvalidated request body and interpolated directly into Cloudflare Analytics Engine SQL queries via template literals. An attacker with platform admin credentials can inject SQL fragmen

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-56281cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-56281