← All credits

livio-a

9 vulnerability records and advisories credit this contributor.

CVE-2026-105214

Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification

CVE-2026-105213

ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations

CVE-2026-105208

ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens

CVE-2026-105212

ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment

CVE-2026-105206

ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service

CVE-2026-105211

ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode

CVE-2026-105210

ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers

CVE-2026-105215

ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback

CVE-2026-105207

ZITADEL before 4.17.3 Account Takeover via External IdP Linking