Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-105215
  • github.com/zitadel/zitadel
 ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback yesterday
  • Fix available
  • Severity - 9.3 (Critical)
CVE-2026-105214
  • github.com/zitadel/zitadel
 Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification yesterday
  • Fix available
  • Severity - 2.3 (Low)
CVE-2026-105213
  • github.com/zitadel/zitadel
 ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations yesterday
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-105212
  • github.com/zitadel/zitadel
 ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment yesterday
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-105211
  • github.com/zitadel/zitadel
 ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode yesterday
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-105210
  • github.com/zitadel/zitadel
 ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers yesterday
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-105209
  • github.com/zitadel/zitadel
 ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment yesterday
  • Fix available
  • Severity - 9.3 (Critical)
CVE-2026-105208
  • github.com/zitadel/zitadel
 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens yesterday
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-105207
  • github.com/zitadel/zitadel
 ZITADEL before 4.17.3 Account Takeover via External IdP Linking yesterday
  • Fix available
  • Severity - 9.3 (Critical)
CVE-2026-105206
  • github.com/zitadel/zitadel
 ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service yesterday
  • Fix available
  • Severity - 5.3 (Medium)
GO-2026-6589
  • Go/github.com/zitadel/zitadel
 ZITADEL: MFA bypass via session reuse in Login V2 in github.com/zitadel/zitadel 4 days ago
  • Fix available
GO-2026-6591
  • Go/github.com/zitadel/zitadel
 ZITADEL: Actions V1 sandbox escape: host file read via require() in github.com/zitadel/zitadel 4 days ago
  • Fix available
CGA-fc24-rvhr-f76v
  • Chainguard/zitadel-4-login
 See record for full details 4 days ago
  • Fix available
  • Severity - 7.4 (High)
CGA-h69r-c89f-596h
  • Chainguard/zitadel-4-login
 See record for full details 4 days ago
  • Fix available
  • Severity - 9.5 (Critical)
CGA-5777-84jv-x3mx
  • Chainguard/zitadel-4-login
 See record for full details 4 days ago
  • Fix available
  • Severity - 3.7 (Low)
CGA-44p6-6h83-pp6r
  • Chainguard/zitadel-4-login
 See record for full details 4 days ago
  • Fix available
  • Severity - 9.5 (Critical)
Load more...