CVE-2026-110535

Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3. Users...

CVE-2026-110535

Apache Syncope is impacted by an Improper Privilege Management vulnerability where AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects versions 3.0.12 through 3.0.16 , 4.0.0-M0 through 4.0.8 , and 4.1.0-M0 through 4.1.3 . T...

EUVD-2026-115151

Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3. Users...