CVE-2026-62183

CVE-2026-62183 — Escalada de privilegios en el autoservicio de usuario de Apache Syncope Gestión inadecuada de privilegios CWE-269 en Apache Syncope. Un usuario autenticado con pocos privilegios puede otorgarse a sí mismo roles arbitrarios y membresías de grupo, recursos externos y un nuevo realm...

CVE-2025-58137 Apache Fineract: IDOR via self-service API

Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release...

CVE-2025-58137

The Apache Fineract digital financial services platform is vulnerable to an authorization bypass caused by an insecure direct object reference (IDOR) flaw. This vulnerability allows an attacker to bypass authorization controls, potentially leading to unauthorized access to data or functions. The ...

MAL-2025-2825 Malicious code in @uniqa/self-service-ms-api-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

KeyIdentity LinOTP Security Vulnerability

Keyidentity KeyIdentity LinOTP is Germany Keyidentity is an open source two-factor authentication solution. The solution supports different authentication protocols, token types and user repositories. A security vulnerability exists in KeyIdentity LinOTP version 3.2.5, which stems from a contenti...