CVE-2026-109083

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process containing a JUEL expression is imported and started, the expressi...

CVE-2026-113687

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class running untrusted code on a separate Thread, thus bypassing the Groovy security sandbox. This issue affects Apache Syncop...

CVE-2026-110535

Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3. Users...

CVE-2026-114364

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. This CVE covers an incomplete fix for CVE-2026-77051: an administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized...

CVE-2026-113511

Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree across administrative realm boundaries without permission for the destination This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0...

EUVD-2026-115155

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. This CVE covers an incomplete fix for CVE-2026-77051: an administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized...

CVE-2026-114364

A SQL injection vulnerability exists in Apache Syncope (versions 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.8, and 4.1.0-M0 through 4.1.3) due to an incomplete fix for CVE-2026-77051. An administrator with sufficient entitlements can execute arbitrary SQL via stacked queries by leveraging unsa...

CVE-2026-114364 Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Syncope. This CVE covers an incomplete fix for CVE-2026-77051: an administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized...

CVE-2026-113687

Apache Syncope is vulnerable to a remote code execution (RCE) flaw due to improper isolation or compartmentalization (CWE-653). An administrator with adequate entitlements for Implementations can create a malicious Groovy class that runs untrusted code on a separate thread, successfully bypassing...

EUVD-2026-115154

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class running untrusted code on a separate Thread, thus bypassing the Groovy security sandbox. This issue affects Apache Syncop...

CVE-2026-113687 Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class running untrusted code on a separate Thread, thus bypassing the Groovy security sandbox. This issue affects Apache Syncop...

CVE-2026-113511 Apache Syncope: Delegated administration boundaries can be bypassed for Realm update

Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree across administrative realm boundaries without permission for the destination This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0...

CVE-2026-113511

Apache Syncope is vulnerable to an authorization bypass (CWE-639) that allows a delegated administrator to relocate a Realm subtree across administrative realm boundaries without authorization for the destination. This issue affects versions 3.0.0-M0 through 3.0.16 , 4.0.0-M0 through 4.0.8 , and ...

EUVD-2026-115153

Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree across administrative realm boundaries without permission for the destination This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0...

EUVD-2026-115151

Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3. Users...

CVE-2026-110535

Apache Syncope is impacted by an Improper Privilege Management vulnerability where AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects versions 3.0.12 through 3.0.16 , 4.0.0-M0 through 4.0.8 , and 4.1.0-M0 through 4.1.3 . T...

CVE-2026-110535 Apache Syncope: AuthProfile value escalation via self-service update

Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3. Users...

CVE-2026-109083 Apache Syncope: Remote Code Execution via Flowable JUEL expression

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process containing a JUEL expression is imported and started, the expressi...

EUVD-2026-115150

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process containing a JUEL expression is imported and started, the expressi...

CVE-2026-109083

Apache Syncope is vulnerable to Remote Code Execution (RCE) due to improper isolation or compartmentalization. An administrator with sufficient entitlements can use the REST API to import arbitrary BPMN process definitions . If these processes contain JUEL expressions , the expressions execute di...