2 matches found
CVE-2026-44671 ZITADEL: LDAP Filter Injection in Login Flow
ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to properly escape user-provided usernames before incorporating them into LDAP search filters. This allo...
7.5CVSS5.8AI score0.00479EPSS
SaveExploits0References3
CVE-2026-44671 ZITADEL: LDAP Filter Injection in Login Flow
ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to properly escape user-provided usernames before incorporating them into LDAP search filters. This allo...
7.5CVSS6AI score
SaveExploits0References5
20