CVE-2026-56666 | ZITADEL up to 4.15.2 External Identity Provider improper authentication

July 10, 2026 Yanac

A vulnerability was found in ZITADEL up to 4.15.2. It has been declared as critical. This affects an unknown function of the component External Identity Provider Handler. Executing a manipulation can lead to improper authentication.

This vulnerability is tracked as CVE-2026-56666. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More