{"vulnerability": "CVE-2026-105207", "sightings": [{"uuid": "5a0c73b4-24fe-46f0-8255-518400990280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx2pzopx6u2e", "content": "\ud83d\udd34 CVE-2026-105207 - Critical (9.8)\n\nZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and exte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105207/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T15:34:13.924527Z"}, {"uuid": "a3f711bb-a2c5-44cb-b5d2-d371066af71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx2rujc4yc2o", "content": "\ud83d\udea8 CVE-2026-105207 \u2014 CVSS 9.3 CRITICAL\n\nZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external ident...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105207\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T16:07:08.279899Z"}, {"uuid": "87cc6bff-6a40-4c58-b04b-a9448ad4ba5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386420278966659", "content": "CVE-2026-105207: CRITICAL vuln in ZITADEL 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 allows unauthenticated attackers to link their own IdP identity to any account \u2014 full takeover possible. Patch status unknown. Details: https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-external-identity-cb61bb81cf2dabad #OffSeq #ZITADEL #Vuln #AccountSecurity", "creation_timestamp": "2026-10-05T04:30:26.572949Z"}, {"uuid": "0d942535-12f4-4be5-a1e8-0b85d957232d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105207", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx43fqbjrh2j", "content": "ZITADEL versions 3.0.0 \u2013 3.4.15 & 4.0.0<4.17.3 hit by CRITICAL vuln (CVE-2026-105207) \u2014 attackers can hijack accounts via IdP link. Patch status unclear: monitor advisories. \ud83d\udea8 https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-exte...", "creation_timestamp": "2026-10-05T04:30:29.516510Z"}, {"uuid": "2e5108f2-42ce-452d-9857-c3542c7950b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105207", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117388330908234854", "content": "Zitadel has some new sev:CRIT CVEs for some not-new vulns.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105211\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105207\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105209\nhttps://nvd.nist.gov/vuln/detail/cve-2026-105215", "creation_timestamp": "2026-10-05T12:36:21.503900Z"}]}