Post
STACKFLAG
stackflag.bsky.social
did:plc:zhe53h7ajlloep2oso5pqxzj
CVE-2026-109373
Versions of ZITADEL from 3.0.0 up to, but not including, 4.19.2 let anyone who can reach the login page guess a session code and obtain a valid session token for another user. This can give full control of the…
Too many irrelevant or confusing CVEs? Use stackflag.com
#CVE #infosec
https://stackflag.com/vulnerabilities/cve-2026-109373?utm_source=bluesky&utm_medium=social&utm_campaign=cve_poster&utm_content=cve-2026-109373
2026-10-12T19:50:04.063Z