CVE-2026-73370

CVE-2026-73370 is an Incorrect Authorization vulnerability in Apache Syncope . The Reconciliation service's pull and push operations perform delegated administration security checks that are incomplete, allowing administrators without adequate entitlements to make authorized calls—effectively byp...