ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations
CVE-2026-105213
ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only
2026-10-05 归档
今日共收录 815 条安全情报，包含 115 个 CVE，364 篇安全通告，以及 81 篇研究论文。
← 返回归档列表ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment
CVE-2026-105212
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UI
ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode
CVE-2026-105211
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers
ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers
CVE-2026-105210
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose
ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment
CVE-2026-105209
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey o
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens
CVE-2026-105208
ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption,
ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service
CVE-2026-105206
ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, whi
SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo
CVE-2026-105205
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink
topoteretes cognee JWT Signing Key get_api_auth_backend.py get_user_id_by_email hard-coded credentials
CVE-2026-105141
A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_
A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route of the file lib/src/StaticFileRouter.cc of the component ...
CVE-2026-105144
A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: bef...
CVE-2026-88779
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, bef
Compatibility Test Suite (CTS)
本条输入来自 Android 安全公告（Android Security Bulletin）站点中关于兼容性测试套件（Compatibility Test Suite，简称 CTS）的页面，标题为 “Compatibility Test S
Compatibility Definition Document (CDD)
该条目指向 Android 官方文档站点上的《兼容性定义文档》(Compatibility Definition Document, CDD) 页面 (https://source.android.com/docs/compatibilit
Tools, build, and related reference
本条并非漏洞公告，而是 Android 官方文档站点（source.android.com）中位于 /docs/setup/reference 路径下的“工具、构建及相关参考”（Tools, build, and related refer
Latest Compatibility Definition Document (CDD)
本次信息来自 Android 开源项目（AOSP）官方文档站点中「最新兼容性定义文档（Latest Compatibility Definition Document，CDD）」页面，经 Android Security Bulletin
Latest security bulletins
本次输入为 Android 安全公告（Android Security Bulletin）中题为“Latest security bulletins”的官方页面条目，发布时间为 2026-10-05。该来源通常用于汇总 Android 平台
update the software on your Mac
Apple 安全发布页面发布了一则安全更新公告，标题为“更新 Mac 上的软件”。该公告指示 Mac 用户更新其设备上的软件，但输入中未提供公告正文、受影响的具体产品版本、漏洞技术细节、CVE 编号或严重性评级。Apple 通常通过此类公告
update the software on your iPhone or iPad
该条目来自 Apple 官方安全发布渠道（Apple Security Releases），标题为“update the software on your iPhone or iPad”，核心含义是提醒 iPhone 与 iPad 用户将设
submit your research
该条目来自 Apple 官方安全发布页面（source_url: https://support.apple.com/en-us/102549），标题为 “submit your research”，发布时间为 2026-10-05，但输入
Get help with security issues
本条信息来自 Apple 官方安全发布渠道（Apple Security Releases），标题为「Get help with security issues（获取安全问题方面的帮助）」，指向 Apple 支持站点页面 support.a