CVE ID :CVE-2026-119127 Published : Oct. 29, 2026, 3:58 p.m. | 27 minutes ago Description :ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticated attackers to poison password-reset, invite, and email-verification links by...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-119127 - ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection

VERWANDTEARTIKEL

CVE-2026-41709

CVE-2026-107347 - Nomad dispatch payload writes can escape the allocation directory through symlinks

CVE-2026-118762 - Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

CVE-2026-118764 - minimatch: potential denial of service via globparts amplification

CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

CVE-2023-7357 - FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability