CVE-2026-75030 Apache Syncope: Incomplete authorization checks for Group members deprovisioning

Missing Authorization vulnerability in Apache Syncope. An administrator with task execution entitlements might be able to mass deprovision group members, regardless of their group-related administration capabilities. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0...

CVE-2026-75030

CVE-2026-75030 is a Missing Authorization vulnerability in Apache Syncope . An administrator with task execution entitlements can mass (de)provision group members regardless of their group-related administration capabilities, effectively bypassing intended access controls. The flaw spans versions...