{"uuid": "2e840be2-50e3-496e-8eb1-22a0a206f09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxca3bfqyv2r", "content": "CVE-2026-105207\nVersions of ZITADEL from 3.0.0 up to 4.17.2 can link a user\u2019s account to an outside identity provider without checking who is making the change. An attacker who knows a user\u2019s login name can attach their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T15:10:03.939399Z"}