CVE-2026-119127

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 30, 2026

Last Seen

October 30, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

ZITADEL Vulnerabilities CVE-2026-119127 and CVE-2026-119128 Expose Accounts to Takeover70.5

ZITADEL versions 4.0.0 to 4.19.5 have two vulnerabilities: CVE-2026-119127 allows unauthenticated attackers to exploit host header injection, while CVE-2026-119128 enables authentication bypass for accounts without an authentication method. Both vulnerabilities were published on 2026-10-29, with CVE...