Skip to content

CVE record · 1 source

CVE-2026-110535

Improper Privilege Management vulnerability in Apache Syncope.

Vendor: Apache Software Foundation
Product: Apache Syncope
Weakness: CWE-269
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 1h ago

Improper Privilege Management vulnerability in Apache Syncope.

Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through…

Fix available CVE-2026-110535 Apache Software Foundation