CVE-2026-109083

Apache Syncope is vulnerable to Remote Code Execution (RCE) due to improper isolation or compartmentalization. An administrator with sufficient entitlements can use the REST API to import arbitrary BPMN process definitions . If these processes contain JUEL expressions , the expressions execute di...