CVE-2026-56666

creationtimestamp| type| source ---|---|--- 2026-07-11 00:22:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfgkuphj2i 2026-09-11 23:31:37+00:00| seen| https://gist.github.com/alon710/98e409473d94480a44fb95ac0ba5823f 2026-09-12 00:01:14+00:00| seen|...

CVE-2026-56666

ZITADEL is an open source identity management platform. Prior to 4.15.3, ZITADEL's external identity provider handler checks that the local user's email is verified but does not verify that the external IdP confirmed ownership of the same email before auto-linking by email, allowing a permissive...