Zzitadel

Products

Exploited and recent CVEs

• CVE-2026-119129 High 8.1 ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval 0.3%
• CVE-2026-119128 High 7.4 ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie 0.3%
• CVE-2026-119127 High 8.1 ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection 0.3%
• CVE-2026-109374 Medium 5.5 ZITADEL 3.0.0 before 4.19.2 Privilege Escalation via OIDC Token Exchange Impersonation 0.2%
• CVE-2026-109373 High 8.1 ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie 0.4%
• CVE-2026-109372 High 8.7 ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion 0.4%
• CVE-2026-109371 High 8.2 ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1 0.4%
• CVE-2026-105215 Critical 9.1 ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback 0.3%
• CVE-2026-105214 Low 2.3 Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification 0.2%
• CVE-2026-105213 High 8.2 ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations 0.2%
• CVE-2026-105212 High 7.5 ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment 0.3%
• CVE-2026-105211 High 8.1 ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode 0.3%
• CVE-2026-105210 High 8.2 ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers 0.2%
• CVE-2026-105209 Critical 9.6 ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment 0.2%
• CVE-2026-105208 High 7.7 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens <0.1%
• CVE-2026-105207 Critical 9.8 ZITADEL before 4.17.3 Account Takeover via External IdP Linking 0.3%
• CVE-2026-105206 Medium 5.3 ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service 0.3%
• CVE-2026-85056 High 8.2 ZITADEL: MFA bypass via session reuse in Login V2 0.3%
• CVE-2026-85057 High 8.7 ZITADEL: Actions V1 sandbox escape: host file read via require() 0.4%
• CVE-2026-76081 Medium 5.5 ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions 0.4%
• CVE-2026-54693 High 8.2 ZITADEL Users Can Self-Verify Email/Phone via API 0.6%
• CVE-2026-56668 High 8.1 ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange 0.4%
• CVE-2026-56666 Medium 4.8 ZITADEL: Auto-linking by email: IdP-side email verification is not checked 0.3%
• CVE-2026-56667 High 7.3 ZITADEL: Stored XSS via Default URI Redirect in Login V2 0.4%
• CVE-2026-56665 Medium 4.2 ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider 0.3%
• CVE-2026-56664 Medium 4.2 ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider 0.3%
• CVE-2026-55672 High 7.4 ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation) 0.4%
• CVE-2026-55671 Low 2.3 ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components 0.4%
• CVE-2026-55670 Low 2.3 ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers 0.4%
• CVE-2026-55669 Medium 4.2 ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider 0.2%