CVE ID :CVE-2026-119129 Published : Oct. 29, 2026, 3:58 p.m. | 26 minutes ago Description :ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authorization vulnerability in Login V2 that allows attackers to approve OAuth 2.0 device authorizations using a victim's existing...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-119129 - ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval

VERWANDTEARTIKEL

CVE-2025-65200

CVE-2026-111577: WordPress-Plugin GoSMTP – Erweiterung mit über 500.000 Installationen potenziell betroffen

CVE-2026-119145 - Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload

CVE-2026-119144 - Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields

CVE-2026-119128 - ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie

CVE-2026-119127 - ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection