CVE-2026-73195

The Apache Syncope identity management tool is vulnerable to an Improper Encoding or Escaping of Output vulnerability. Authenticated users can inject a spreadsheet formula payload into their own plain attributes. If these users are subsequently included in a CSV export , the formula may execute w...