CVE-2026-53421

Apache Syncope is affected by a Remote Code Execution (RCE) vulnerability (CVE-2026-53421) in the scripted connectors subsystem. An administrator with adequate entitlements can leverage scripted connectors (REST and SQL) to run Groovy scripts, enabling RCE. Affected versions include 3.0.0-M0–3.0....

CVE-2026-53421 Apache Syncope: Remote Code Execution via Scripted Connector

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' REST and SQL capability to run Groovy scripts. This issue affects Apache...