zitadel zitadel

• CVE-2026-119129 High 8.1 ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval 0.3%
• CVE-2026-119128 High 7.4 ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie 0.3%
• CVE-2026-119127 High 8.1 ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection 0.3%
• CVE-2026-109374 Medium 5.5 ZITADEL 3.0.0 before 4.19.2 Privilege Escalation via OIDC Token Exchange Impersonation 0.2%
• CVE-2026-109373 High 8.1 ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie 0.4%
• CVE-2026-109372 High 8.7 ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion 0.4%
• CVE-2026-109371 High 8.2 ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1 0.4%
• CVE-2026-105215 Critical 9.1 ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback 0.3%
• CVE-2026-105214 Low 2.3 Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification 0.2%
• CVE-2026-105213 High 8.2 ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations 0.2%
• CVE-2026-105212 High 7.5 ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment 0.3%
• CVE-2026-105211 High 8.1 ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode 0.3%
• CVE-2026-105210 High 8.2 ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers 0.2%
• CVE-2026-105209 Critical 9.6 ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment 0.2%
• CVE-2026-105208 High 7.7 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens <0.1%
• CVE-2026-105207 Critical 9.8 ZITADEL before 4.17.3 Account Takeover via External IdP Linking 0.3%
• CVE-2026-105206 Medium 5.3 ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service 0.3%
• CVE-2026-85056 High 8.2 ZITADEL: MFA bypass via session reuse in Login V2 0.3%
• CVE-2026-85057 High 8.7 ZITADEL: Actions V1 sandbox escape: host file read via require() 0.4%
• CVE-2026-76081 Medium 5.5 ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions 0.4%
• CVE-2026-54693 High 8.2 ZITADEL Users Can Self-Verify Email/Phone via API 0.6%
• CVE-2026-56668 High 8.1 ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange 0.4%
• CVE-2026-56666 Medium 4.8 ZITADEL: Auto-linking by email: IdP-side email verification is not checked 0.3%
• CVE-2026-56667 High 7.3 ZITADEL: Stored XSS via Default URI Redirect in Login V2 0.4%
• CVE-2026-56665 Medium 4.2 ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider 0.3%
• CVE-2026-56664 Medium 4.2 ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider 0.3%
• CVE-2026-55672 High 7.4 ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation) 0.4%
• CVE-2026-55671 Low 2.3 ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components 0.4%
• CVE-2026-55670 Low 2.3 ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers 0.4%
• CVE-2026-55669 Medium 4.2 ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider 0.2%
• CVE-2026-44671 High 7.5 ZITADEL: LDAP Filter Injection in Login Flow 0.5%
• CVE-2026-33132 Medium 5.3 ZITADEL is missing enforcement of organization scopes 0.3%
• CVE-2026-32132 High 7.4 ZITADEL: Reactivation of Expired Passkey Registration Codes 0.5%
• CVE-2026-32131 High 7.7 ZITADEL Cross-Tenant Information Disclosure in Management API 0.4%
• CVE-2026-32130 High 7.5 ZITADEL SCIM Authentication Bypass via URL Encoding 0.7%
• CVE-2026-29067 High 8.1 ZITADEL: Account Takeover Due to Improper Instance Validation in V2 Login 0.4%
• CVE-2026-29193 High 8.2 ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2 0.4%
• CVE-2026-29192 High 7.7 ZITADEL: Stored XSS via Default URI Redirect Leads to Account Takeover 0.4%
• CVE-2026-29191 Critical 9.3 ZITADEL: 1-Click Account Takeover via XSS in /saml-post Endpoint 0.5%
• CVE-2026-27946 High 8.2 ZITADEL Users Can Self-Verify Email/Phone via UpdateHumanUser API 0.2%
• CVE-2026-27945 Low 2.1 ZITADEL has potential SSRF via Actions 0.3%
• CVE-2026-27840 Medium 4.3 ZITADEL's truncated opaque tokens are still valid 0.2%
• CVE-2026-23511 Medium 5.3 ZITADEL has a user enumeration vulnerability in Login UIs 0.4%
• CVE-2025-67717 Medium 5.3 Zitadel Discloses the Total Number of Instance Users 0.2%
• CVE-2025-67495 High 8.0 ZITADEL Vulnerable to Account Takeover via DOM-Based XSS in Zitadel V2 Login 0.3%
• CVE-2025-67494 Critical 9.3 ZITADEL Vulnerable to Unauthenticated Full-Read SSRF via V2 Login 0.4%
• CVE-2025-64717 High 7.4 ZITADEL vulnerable to Account Takeover with deactivated Instance IdP 0.5%
• CVE-2025-64431 High 8.7 IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering 0.3%
• CVE-2025-64103 High 8.7 Zitadel Bypass Second Authentication Factor 0.4%
• CVE-2025-64102 High 7.7 Zitadel allows brute-forcing authentication factors 0.4%