CVE record · 1 source
CVE-2026-114364
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope.
- Vendor
- Apache Software Foundation
- Product
- Apache Syncope
- Weakness
- CWE-89
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope.
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope. This CVE covers an incomplete fix for CVE-2026-77051: an administrator with adequate entitlements can achieve…