CVE-2026-73195

CVE-2026-73195 is an improper encoding or escaping (CSV injection) vulnerability in Apache Syncope . An authenticated user can store a spreadsheet formula payload in their own plain attribute; when that user is included in a CSV export and the file is opened by a spreadsheet application, the form...