CVE-2026-62418

Apache Syncope is affected by CVE-2026-62418, a low-privileged authenticated SSRF via the Connectors and Resources check. Affected versions are 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.6, and 4.1.0-M0 through 4.1.1. The issue is mitigated by upgrading to version 4.0.7 or 4.1.2, which fixes t...