Skip to content
Threat Feed
Subscribe

Product

ZITADEL Login V2 (4.0.0-4.16.0)

1 brief RSS
high advisory

ZITADEL Login V2 MFA Bypass via Session Reuse

A session-reuse vulnerability in ZITADEL Login V2 (CVE-2026-85056) allows attackers with valid credentials to bypass MFA by abandoning and restarting the login flow in organizations where MFA is not strictly enforced.

ZITADEL Login V2 authentication-bypass mfa-bypass cve-2026-85056
1t 1c