https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:34:45.661513+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-32868 CVE-2024-32868 — ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass 2026-10-06T16:34:45.678267+00:00

Affected: zitadel

ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. While ZITADEL already gives administrators the option to define a `Lockout Policy` with a maximum amount of failed password check attempts, there was no such mechanism for (T)OTP checks. This issue has been patched in version 2.50.0.