Post
STACKFLAG
stackflag.bsky.social
did:plc:zhe53h7ajlloep2oso5pqxzj
CVE-2026-105207
Versions of ZITADEL from 3.0.0 up to 4.17.2 can link a user’s account to an outside identity provider without checking who is making the change. An attacker who knows a user’s login name can attach their own…
Too many irrelevant or confusing CVEs? Use stackflag.com
#CVE #infosec
https://stackflag.com/vulnerabilities/cve-2026-105207?utm_source=bluesky&utm_medium=social&utm_campaign=cve_poster&utm_content=cve-2026-105207
2026-10-07T15:10:03.462Z