https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:41:49 +0000 https://vulnerability.circl.lu/sighting/2e840be2-50e3-496e-8eb1-22a0a206f09c/export {"uuid": "2e840be2-50e3-496e-8eb1-22a0a206f09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxca3bfqyv2r", "content": "CVE-2026-105207\nVersions of ZITADEL from 3.0.0 up to 4.17.2 can link a user\u2019s account to an outside identity provider without checking who is making the change. An attacker who knows a user\u2019s login name can attach their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T15:10:03.939399Z"} {"uuid": "2e840be2-50e3-496e-8eb1-22a0a206f09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxca3bfqyv2r", "content": "CVE-2026-105207\nVersions of ZITADEL from 3.0.0 up to 4.17.2 can link a user\u2019s account to an outside identity provider without checking who is making the change. An attacker who knows a user\u2019s login name can attach their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T15:10:03.939399Z"} https://vulnerability.circl.lu/sighting/2e840be2-50e3-496e-8eb1-22a0a206f09c/export Wed, 07 Oct 2026 15:10:03 +0000 https://vulnerability.circl.lu/sighting/bc1e49d9-19bf-43d2-b2fe-6787bd2df6b1/export {"uuid": "bc1e49d9-19bf-43d2-b2fe-6787bd2df6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mx66h3vva42k", "content": "ZITADEL patched four authentication bypass flaws this week. Two are critical: CVE-2026-105207 (CVSS 9.8) and CVE-2026-105215 (CVSS 9.1). No confirmed exploitation in the wild. Patch. #infosec https://0daynews.com/articles/2026-10-05-zitadel-four-auth-bypass-cves/", "creation_timestamp": "2026-10-06T00:30:15.386612Z"} {"uuid": "bc1e49d9-19bf-43d2-b2fe-6787bd2df6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mx66h3vva42k", "content": "ZITADEL patched four authentication bypass flaws this week. Two are critical: CVE-2026-105207 (CVSS 9.8) and CVE-2026-105215 (CVSS 9.1). No confirmed exploitation in the wild. Patch. #infosec https://0daynews.com/articles/2026-10-05-zitadel-four-auth-bypass-cves/", "creation_timestamp": "2026-10-06T00:30:15.386612Z"} https://vulnerability.circl.lu/sighting/bc1e49d9-19bf-43d2-b2fe-6787bd2df6b1/export Tue, 06 Oct 2026 00:30:15 +0000 https://vulnerability.circl.lu/sighting/2e5108f2-42ce-452d-9857-c3542c7950b8/export {"uuid": "2e5108f2-42ce-452d-9857-c3542c7950b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117388330908234854", "content": "Zitadel has some new sev:CRIT CVEs for some not-new vulns.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105211\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105207\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105209\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105215", "creation_timestamp": "2026-10-05T12:36:21.503900Z"} {"uuid": "2e5108f2-42ce-452d-9857-c3542c7950b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117388330908234854", "content": "Zitadel has some new sev:CRIT CVEs for some not-new vulns.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105211\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105207\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105209\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105215", "creation_timestamp": "2026-10-05T12:36:21.503900Z"} https://vulnerability.circl.lu/sighting/2e5108f2-42ce-452d-9857-c3542c7950b8/export Mon, 05 Oct 2026 12:36:21 +0000 https://vulnerability.circl.lu/sighting/0d942535-12f4-4be5-a1e8-0b85d957232d/export {"uuid": "0d942535-12f4-4be5-a1e8-0b85d957232d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx43fqbjrh2j", "content": "ZITADEL versions 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 hit by CRITICAL vuln (CVE-2026-105207) \u2014 attackers can hijack accounts via IdP link. Patch status unclear: monitor advisories. \ud83d\udea8 https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-exte...", "creation_timestamp": "2026-10-05T04:30:29.516510Z"} {"uuid": "0d942535-12f4-4be5-a1e8-0b85d957232d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx43fqbjrh2j", "content": "ZITADEL versions 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 hit by CRITICAL vuln (CVE-2026-105207) \u2014 attackers can hijack accounts via IdP link. Patch status unclear: monitor advisories. \ud83d\udea8 https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-exte...", "creation_timestamp": "2026-10-05T04:30:29.516510Z"} https://vulnerability.circl.lu/sighting/0d942535-12f4-4be5-a1e8-0b85d957232d/export Mon, 05 Oct 2026 04:30:29 +0000 https://vulnerability.circl.lu/sighting/87cc6bff-6a40-4c58-b04b-a9448ad4ba5d/export {"uuid": "87cc6bff-6a40-4c58-b04b-a9448ad4ba5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386420278966659", "content": "CVE-2026-105207: CRITICAL vuln in ZITADEL 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 allows unauthenticated attackers to link their own IdP identity to any account \u2014 full takeover possible. Patch status unknown. Details: https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-external-identity-cb61bb81cf2dabad #OffSeq #ZITADEL #Vuln #AccountSecurity", "creation_timestamp": "2026-10-05T04:30:26.572949Z"} {"uuid": "87cc6bff-6a40-4c58-b04b-a9448ad4ba5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386420278966659", "content": "CVE-2026-105207: CRITICAL vuln in ZITADEL 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 allows unauthenticated attackers to link their own IdP identity to any account \u2014 full takeover possible. Patch status unknown. Details: https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-external-identity-cb61bb81cf2dabad #OffSeq #ZITADEL #Vuln #AccountSecurity", "creation_timestamp": "2026-10-05T04:30:26.572949Z"} https://vulnerability.circl.lu/sighting/87cc6bff-6a40-4c58-b04b-a9448ad4ba5d/export Mon, 05 Oct 2026 04:30:26 +0000 https://vulnerability.circl.lu/sighting/a3f711bb-a2c5-44cb-b5d2-d371066af71d/export {"uuid": "a3f711bb-a2c5-44cb-b5d2-d371066af71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx2rujc4yc2o", "content": "\ud83d\udea8 CVE-2026-105207 \u2014 CVSS 9.3 CRITICAL\n\nZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external ident...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105207\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T16:07:08.279899Z"} {"uuid": "a3f711bb-a2c5-44cb-b5d2-d371066af71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx2rujc4yc2o", "content": "\ud83d\udea8 CVE-2026-105207 \u2014 CVSS 9.3 CRITICAL\n\nZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external ident...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105207\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T16:07:08.279899Z"} https://vulnerability.circl.lu/sighting/a3f711bb-a2c5-44cb-b5d2-d371066af71d/export Sun, 04 Oct 2026 16:07:08 +0000 https://vulnerability.circl.lu/sighting/5a0c73b4-24fe-46f0-8255-518400990280/export {"uuid": "5a0c73b4-24fe-46f0-8255-518400990280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx2pzopx6u2e", "content": "\ud83d\udd34 CVE-2026-105207 - Critical (9.8)\n\nZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and exte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105207/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T15:34:13.924527Z"} {"uuid": "5a0c73b4-24fe-46f0-8255-518400990280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx2pzopx6u2e", "content": "\ud83d\udd34 CVE-2026-105207 - Critical (9.8)\n\nZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and exte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105207/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T15:34:13.924527Z"} https://vulnerability.circl.lu/sighting/5a0c73b4-24fe-46f0-8255-518400990280/export Sun, 04 Oct 2026 15:34:13 +0000