https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-04T23:11:53.862110+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110535 CVE-2026-110535 — Apache Syncope: AuthProfile value escalation via self-service update 2026-11-04T23:11:53.862940+00:00

Affected: Apache Software Foundation Apache Syncope

Improper Privilege Management vulnerability in Apache Syncope.

AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3.

Users are recommended to upgrade to version 4.0.9 / 4.1.4, which fix this issue.