Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 04 Nov 2026 13:11:42 +0000 CVE-2026-110535 — Apache Syncope: AuthProfile value escalation via self-service update https://db.gcve.eu/vuln/cve-2026-110535 <p><strong>Affected:</strong> Apache Software Foundation Apache Syncope</p> <p>Improper Privilege Management vulnerability in Apache Syncope.</p> <p>AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3.</p> <p>Users are recommended to upgrade to version 4.0.9 / 4.1.4, which fix this issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Syncope</p> <p>Improper Privilege Management vulnerability in Apache Syncope.</p> <p>AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3.</p> <p>Users are recommended to upgrade to version 4.0.9 / 4.1.4, which fix this issue.</p> https://db.gcve.eu/vuln/cve-2026-110535