https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:26:12 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-105215 <p>ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the &#39;external account not found&#39; registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged IDPConfigID and ExternalUserID values to pre-create an account bound to a victim&#39;s external IdP identity, which the victim&#39;s later genuine external login then signs into.</p> <p>ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the &#39;external account not found&#39; registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged IDPConfigID and ExternalUserID values to pre-create an account bound to a victim&#39;s external IdP identity, which the victim&#39;s later genuine external login then signs into.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-105215 https://vulnerability.circl.lu/vuln/ghsa-639g-x9rp-hw3x <p>ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the &#39;external account not found&#39; registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged IDPConfigID and ExternalUserID values to pre-create an account bound to a victim&#39;s external IdP identity, which the victim&#39;s later genuine external login then signs into.</p> <p>ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the &#39;external account not found&#39; registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged IDPConfigID and ExternalUserID values to pre-create an account bound to a victim&#39;s external IdP identity, which the victim&#39;s later genuine external login then signs into.</p> https://vulnerability.circl.lu/vuln/ghsa-639g-x9rp-hw3x