CVE-2026-73668 Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values

Incorrect Authorization vulnerability in Apache Syncope. An administrator with adequate entitlements in a given Realm may be able to read via REST the full Connector configuration, confidential properties included, scoped in another Realm and thus be able to effectively duplicate such Connector...