CVE-2026-53982 describes a denial-of-service vulnerability in Cap-go Console versions before 12.28.2. The issue arises in the account deletion flow where the system improperly links the deletion state to the device identifier of an active session. As a result, the affected device or browser is prevented from logging in or registering new accounts for approximately 30 days by being redirected to an account-disabled page. This vulnerability can be exploited by an attacker to block legitimate users from authenticating or onboarding on specific devices.

The vulnerability causes a denial-of-service condition for users on affected devices or browsers by blocking authentication and onboarding functions for about 30 days. This can disrupt normal user access and onboarding processes, potentially impacting user experience and operational continuity. There is no indication of data compromise or privilege escalation from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch has been documented at this time. Until a patch is available, users should monitor vendor communications for updates. Since this is not a cloud service, remediation depends on vendor patch release and user application of updates.