CVE-2026-110535

Apache Syncope is impacted by an Improper Privilege Management vulnerability where AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects versions 3.0.12 through 3.0.16 , 4.0.0-M0 through 4.0.8 , and 4.1.0-M0 through 4.1.3 . T...