Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

791 matches found

vulnersOsv
vulnersOsv•added 2026/05/26 1:30 p.m.•2 views

org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=3.0.16), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=3.0.16) +30 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (>=3.0.0-m0, <=3.0.16)

org.apache.syncope.core:syncope-core-spring MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0, =3.0.16 and more Source cves:...

7.2CVSS5.8AI score0.00865EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/05/26 1:30 p.m.•1 views

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0-m0, <=4.0.5), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0-m0, <=4.0.5) +33 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (>=4.0.0-m0, <=4.0.5)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.5 and more Source cves: CVE-2026-42782https://vulne...

7.2CVSS5.8AI score0.00865EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/05/26 1:30 p.m.•2 views

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0-m0, <=4.0.5), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0-m0, <=4.0.5) +33 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (>=4.0.0-m0, <=4.0.5)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.5 and more Source cves: CVE-2026-42782https://vulne...

7.2CVSS5.8AI score0.00865EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/05/26 1:30 p.m.•1 views

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.0), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.0) +33 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (>=4.1.0-m0, <=4.1.0)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0 and more Source cves: CVE-2026-42782https://vu...

7.2CVSS5.8AI score0.00865EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/05/26 1:30 p.m.•2 views

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.0), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.0) +33 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (>=4.1.0-m0, <=4.1.0)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0 and more Source cves: CVE-2026-42782https://vu...

7.2CVSS5.8AI score0.00865EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/05/25 5:00 p.m.•2 views

org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m1, <=4.0.5), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m1, <=4.0.5) +38 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (>=3.0.0-m1, <=4.0.5)

org.apache.syncope.core:syncope-core-spring MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.2, =4.0.0-m0, =3.0.0-m1, =3.0.0-m1, =4.0.0-m0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.5 and more Source cves: CVE-2026-42782https://vulners.com/cve...

7.2CVSS5.8AI score0.00865EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/05/25 5:00 p.m.•1 views

org.apache.syncope.core.am:syncope-core-am-logic (4.1.0), org.apache.syncope.core.am:syncope-core-am-rest-cxf (4.1.0) +33 more potentially affected by CVE-2026-42782 via org.apache.syncope.core:syncope-core-spring (4.1.0)

org.apache.syncope.core:syncope-core-spring MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core.am:syncope-core-am-logic 4.1.0 -...

7.2CVSS5.8AI score0.00865EPSS
SaveExploits0
Snyk
Snyk•added 2026/05/25 5:00 p.m.•20 views

Improper Isolation or Compartmentalization

Overview Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization in the GroovyInterceptor initialization of classes via GroovySandbox. An administrator user with the Implementations entitlement can execute arbitrary code by creating a malicious Groovy class...

8.6CVSS6.5AI score0.00865EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv•added 2026/05/25 4:59 p.m.•2 views

org.apache.syncope.core.am:syncope-core-am-logic (4.1.0), org.apache.syncope.core.am:syncope-core-am-rest-cxf (4.1.0) +36 more potentially affected by CVE-2026-42797 via org.apache.syncope.core:syncope-core-provisioning-api (4.1.0)

org.apache.syncope.core:syncope-core-provisioning-api MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-provisioning-api and may be impacted: - org.apache.syncope.core.am:syncope-core-am-logic 4.1....

4.9CVSS5.8AI score0.00564EPSS
SaveExploits0
Snyk
Snyk•added 2026/05/25 4:59 p.m.•19 views

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in JexlContextBuilder. An administrator user with entitlements for Derived Schemas and User read can access other users' passwordHistory, securityAnswer, token, tokenExpireTime, and cipherAlgorithm values via...

5.1CVSS5.7AI score0.00564EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv•added 2026/05/25 4:59 p.m.•1 views

org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0, <=4.0.5), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0, <=4.0.5) +41 more potentially affected by CVE-2026-42797 via org.apache.syncope.core:syncope-core-provisioning-api (>=3.0.0, <=4.0.5)

org.apache.syncope.core:syncope-core-provisioning-api MAVEN version =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.0.2, =4.0.0-m0, =3.0.0, =3.0.0, =4.0.0-m0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.0.5 and more Source cves: CVE-2026-42797 Source adv...

4.9CVSS5.8AI score0.00564EPSS
SaveExploits0
NVD
NVD•added 2026/05/25 4:16 p.m.•41 views

CVE-2026-42797

Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access User-related...

4.9CVSS0.00564EPSS
SaveExploits0References2
NVD
NVD•added 2026/05/25 4:16 p.m.•39 views

CVE-2026-42782

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code reaching a non-sandboxed execution path via the class static initializer. This issue affects...

7.2CVSS0.00865EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/05/25 3:00 p.m.•60 views

CVE-2026-42797 Apache Syncope: JexlContextBuilder Information Disclosure

Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access User-related...

0.00564EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv•added 2026/05/25 3:00 p.m.•2 views

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0-m0, <=4.0.5), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0-m0, <=4.0.5) +36 more potentially affected by CVE-2026-42797 via org.apache.syncope.core:syncope-core-provisioning-api (>=4.0.0-m0, <=4.0.5)

org.apache.syncope.core:syncope-core-provisioning-api MAVEN version =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.2, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.0-m0, =4.0.5 and more Source cves:...

4.9CVSS5.8AI score0.00564EPSS
SaveExploits0
Vulnrichment
Vulnrichment•added 2026/05/25 3:00 p.m.•21 views

CVE-2026-42797 Apache Syncope: JexlContextBuilder Information Disclosure

Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access User-related...

5.9AI score0.00564EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv•added 2026/05/25 3:00 p.m.•1 views

org.apache.syncope.core.am:syncope-core-am-logic (>=4.1.0-m0, <=4.1.0), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.1.0-m0, <=4.1.0) +36 more potentially affected by CVE-2026-42797 via org.apache.syncope.core:syncope-core-provisioning-api (>=4.1.0-m0, <=4.1.0)

org.apache.syncope.core:syncope-core-provisioning-api MAVEN version =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0-m0, =4.1.0 and more Source cves:...

4.9CVSS5.8AI score0.00564EPSS
SaveExploits0
osv_cve
osv_cve•added 2026/05/25 3:00 p.m.•20 views

CVE-2026-42797 Apache Syncope: JexlContextBuilder Information Disclosure

Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access User-related...

4.9CVSS5.9AI score0.00564EPSS
SaveExploits0References5
attackerkb
attackerkb•added 2026/05/25 3:00 p.m.•25 views

CVE-2026-42797

Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access User-related...

6AI score0.00564EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD•added 2026/05/25 3:00 p.m.•33 views

EUVD-2026-31702

Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access User-related...

5.9AI score0.00564EPSS
SaveExploits0References1
Rows per page
Query Builder