Login Request a demo
ZI
Product
zitadel
by zitadel · last CVE Oct 12, 2026
75
CVEs
0
On KEV
9.8
Max CVSS
14
New 30D
Vulnerabilities75In the news0Timeline
Severity mix
Critical 10High 33Medium 28Low 4
Severity
All severities75Critical10High33Medium28Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add zitadel to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-47111
3.7
1%
Nov 8
ZITADEL provides identity infrastructure
Affected: before 2.38.3; 2.39.0 before 2.40.5
CVE-2026-105214
2.3
0%
Oct 4
Zitadel before 4.16.2 SSRF via Organization Domain HTTP Verification
Affected: before 4.16.2
CVE-2026-55671
2.3
0%
Jul 10
ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components
Affected: < 4.15.2
CVE-2026-55670
2.3
0%
Jul 10
ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers
Affected: < 4.15.2
Showing 4