← All credits

lucasdodgson

7 vulnerability records and advisories credit this contributor.

CVE-2026-119127

ZITADEL 4.0.0 before 4.19.5 Account Takeover via Login V2 Host Header Injection

CVE-2026-105212

ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment

CVE-2026-105210

ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers

CVE-2026-105207

ZITADEL before 4.17.3 Account Takeover via External IdP Linking

CVE-2026-119129

ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval

CVE-2026-109373

ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie

CVE-2026-105211

ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode