CVE-2026-62418

Apache Syncope is vulnerable to a Server-Side Request Forgery (SSRF) flaw in the IDM logic layer, specifically within the ConnectorLogic.check(final ConnInstanceTO) and ResourceLogic.check(final ResourceTO) methods. The root cause is a failure to properly validate user inputs during connection an...