Recent Items
{"uuid": "2e840be2-50e3-496e-8eb1-22a0a206f09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxca3bfqyv2r", "content": "CVE-2026-105207\nVersions of ZITADEL from 3.0.0 up to 4.17.2 can link a user\u2019s account to an outside identity provider without checking who is making the change. An attacker who know…
Published on 2026-10-07T15:10:03.939399+00:00
Updated on 2026-10-11T09:09:28.495689+00:00
{"uuid": "4f02b677-6bec-4dbd-8bc3-5a34b3496436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10520", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104555", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-10520-PO…
Published on 2026-10-07T15:00:08+00:00
Updated on 2026-10-11T09:09:28.497188+00:00
{"uuid": "0e37a267-57e4-4bed-8972-b48d00cdd237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10520", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-07)", "content": "", "creation_timestamp": "2026-10-07T00:00:00.000000Z"}
Published on 2026-10-07T00:00:00+00:00
Updated on 2026-10-11T09:09:28.497360+00:00
{"uuid": "bc1e49d9-19bf-43d2-b2fe-6787bd2df6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mx66h3vva42k", "content": "ZITADEL patched four authentication bypass flaws this week. Two are critical: CVE-2026-105207 (CVSS 9.8) and CVE-2026-105215 (CVSS 9.1). No confirmed exploitation in the wild. Patch. #info…
Published on 2026-10-06T00:30:15.386612+00:00
Updated on 2026-10-11T09:09:28.497492+00:00
{"uuid": "1a11c07c-fb7f-4d4f-a0e2-274e5314d000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105209", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117388330908234854", "content": "Zitadel has some new sev:CRIT CVEs for some not-new vulns.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105211\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105207\nhttps://nvd.nist.gov/vuln/det…
Published on 2026-10-05T12:36:21.542191+00:00
Updated on 2026-10-11T09:09:28.497621+00:00
{"uuid": "2e5108f2-42ce-452d-9857-c3542c7950b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117388330908234854", "content": "Zitadel has some new sev:CRIT CVEs for some not-new vulns.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105211\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105207\nhttps://nvd.nist.gov/vuln/det…
Published on 2026-10-05T12:36:21.503900+00:00
Updated on 2026-10-11T09:09:28.497744+00:00
{"uuid": "0d942535-12f4-4be5-a1e8-0b85d957232d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx43fqbjrh2j", "content": "ZITADEL versions 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 hit by CRITICAL vuln (CVE-2026-105207) \u2014 attackers can hijack accounts via IdP link. Patch status unclear: monitor advisories.…
Published on 2026-10-05T04:30:29.516510+00:00
Updated on 2026-10-11T09:09:28.497858+00:00
{"uuid": "87cc6bff-6a40-4c58-b04b-a9448ad4ba5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386420278966659", "content": "CVE-2026-105207: CRITICAL vuln in ZITADEL 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 allows unauthenticated attackers to link their own IdP identity to any account \u2014 full takeover pos…
Published on 2026-10-05T04:30:26.572949+00:00
Updated on 2026-10-11T09:09:28.497977+00:00
{"uuid": "ec57fcb3-5f51-481f-b404-9b9c7d03ac0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10520", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-05)", "content": "", "creation_timestamp": "2026-10-05T00:00:00.000000Z"}
Published on 2026-10-05T00:00:00+00:00
Updated on 2026-10-11T09:09:28.498096+00:00
{"uuid": "20d29aac-5f83-4d56-ba03-888016d77fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105209", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx2rurgvu52n", "content": "\ud83d\udea8 CVE-2026-105209 \u2014 CVSS 9.3 CRITICAL\n\nZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issu...\n\n\ud83d\udd0e http…
Published on 2026-10-04T16:07:15.281053+00:00
Updated on 2026-10-11T09:09:28.498213+00:00