Skip to content

CVE record · 1 source

CVE-2026-109083

Improper isolation or compartmentalization vulnerability in Apache Syncope.

Vendor: Apache Software Foundation
Product: Apache Syncope
Weakness: CWE-653
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 1h ago

Improper isolation or compartmentalization vulnerability in Apache Syncope.

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN…

Fix available CVE-2026-109083 Apache Software Foundation