EUVD-2026-77460

Missing Authorization vulnerability in Apache Syncope. An administrator with task execution entitlements might be able to mass deprovision group members, regardless of their group-related administration capabilities. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0...