Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a possible account takeover via Default URI Redirect. This issue has been patched in version 4.12.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-07 | 2 | Disclosure1General1 |
| 2026-03-12 | 1 | Disclosure1 |
CVE-2026-29192 ZITADEL Identity Platform Account Takeover Vulnerability in Login V2 Interface https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29192
Post summary
This entry announces an account takeover vulnerability in ZITADEL Identity Platform’s Login V2 interface, but does not include proof-of-concept details, exploit code, active exploitation reports, or patch information.
CVE-2026-29192 (CVSS:7.7, HIGH) is Analyzed. ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login..https://nvd.nist.gov/vuln/detail/CVE-2026-29192 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet highlights CVE‑2026‑29192 with a CVSS rating of 7.7 (HIGH), affecting Zitadel versions 4.0.0 to 4.11.1, but provides no PoC, exploit code, or patch information.
CVE-2026-29192 ZITADEL is an open source identity management platform. From version 4.0.0 to 4.11.1, a vulnerability in Zitadel's login V2 interface was discovered that allowed a po… https://www.cve.org/CVERecord?id=CVE-2026-29192
Post summary
The post notes a CVE for Zitadel login V2, references the CVE record, but provides no further technical or remediation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | zitadel | zitadel | - | - | - |