CVE-2026-113687

Apache Syncope is vulnerable to a remote code execution (RCE) flaw due to improper isolation or compartmentalization (CWE-653). An administrator with adequate entitlements for Implementations can create a malicious Groovy class that runs untrusted code on a separate thread, successfully bypassing...