CVE-2026-63071

An Improper Isolation or Compartmentalization vulnerability exists in Apache Syncope (specifically the GroovySandboxScriptEngineImpl in the core/spring module). An administrator with sufficient entitlements to manage Implementations can create a malicious Groovy class that bypasses the Groovy sec...