Post
STACKFLAG
stackflag.bsky.social
did:plc:zhe53h7ajlloep2oso5pqxzj
CVE-2026-109372
In ZITADEL versions before 4.19.2 (4.x) and up to 3.4.15 (3.x), an admin can add a fake SAML provider and then log in as any other user, even across different organizations. This can give them access to data…
Too many irrelevant or confusing CVEs? Use stackflag.com
#CVE #infosec
https://stackflag.com/vulnerabilities/cve-2026-109372?utm_source=bluesky&utm_medium=social&utm_campaign=cve_poster&utm_content=cve-2026-109372
2026-10-12T19:40:04.855Z