Capillary io

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Capillary io records in CISA KEV

No Capillary io vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-27150 CVE-2025-40680 · GHSA-3g73-h9cm-2486

Encryption of sensitive data in CapillaryScope missing

LOW 29

Lack of sensitive data encryption in CapillaryScope v2.5.0 of Capillary io, which stores both the proxy credentials and the JWT session token in plain text within different registry keys on the Windows operating system.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00085 Published 2025-07-24 Fixed in 2.5.0 CWE-311

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0