Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-85056

1 brief RSS
high advisory

ZITADEL Login V2 MFA Bypass via Session Reuse

A session-reuse vulnerability in ZITADEL Login V2 (CVE-2026-85056) allows attackers with valid credentials to bypass MFA by abandoning and restarting the login flow in organizations where MFA is not strictly enforced.

ZITADEL Login V2 authentication-bypass mfa-bypass cve-2026-85056
1t 1c