Login Request a demo
ZI
Product
zitadel
by zitadel · last CVE Oct 29, 2026
78
CVEs
0
On KEV
9.8
Max CVSS
17
New 30D
Vulnerabilities78In the news0Timeline
Severity mix
Critical 10High 36Medium 28Low 4
Severity
All severities78Critical10High36Medium28Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add zitadel to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-47111
3.7
1%
Nov 8
ZITADEL race condition in lockout policy execution
Affected: >= 2.39.0, < 2.40.5; < 2.38.3
CVE-2026-105214
2.3
0%
Oct 4
Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification
Affected: before 4.16.2
CVE-2026-55671
2.3
0%
Jul 10
ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components
Affected: < 4.15.2
CVE-2026-55670
2.3
0%
Jul 10
ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers
Affected: < 4.15.2
Showing 4