EUVD-2026-45962

Improper Privilege Management vulnerability in Apache Syncope. When: the all-Java user workflow adapter is configured, or the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration of self update requests the following...

CVE-2026-62183

CVE-2026-62183 affects Apache Syncope through multiple releases (3.0.0-M0–3.0.16, 4.0.0-M0–4.0.6, 4.1.0-M0–4.1.1). The issue is an Improper Privilege Management where, when using the all-Java user workflow adapter or the Flowable user workflow adapter with a BPMN definition that bypasses admin ap...

CVE-2026-62183 Apache Syncope: User self-service privilege escalation

Improper Privilege Management vulnerability in Apache Syncope. When: the all-Java user workflow adapter is configured, or the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration of self update requests the following...