CVE-2026-105212

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 4, 2026

Last Seen

October 5, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

ZITADEL Identity Provider Vulnerabilities Expose Critical Authentication Flaws70.5

Between October 2 and October 5, 2026, a cluster of vulnerabilities affecting the ZITADEL identity provider was disclosed, revealing 15 CVEs, including critical flaws that allow unauthenticated account takeover and bypass of multi-factor authentication (MFA). The most severe vulnerabilities include...