CVE ID :CVE-2026-119128 Published : Oct. 29, 2026, 3:58 p.m. | 27 minutes ago Description :ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-119128 - ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie

VERWANDTEARTIKEL

CVE-2026-41709

CVE-2026-107347 - Nomad dispatch payload writes can escape the allocation directory through symlinks

CVE-2026-118762 - Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

CVE-2026-118764 - minimatch: potential denial of service via globparts amplification

CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

CVE-2023-7357 - FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability