Exploited: 178
LatestCVE-2026-124040 — CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State
VulnFeed.org
AREN

Apache Software Foundation Apache Syncope vulnerabilities and fixes

Exploited and high-severity Apache Software Foundation Apache Syncope vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 9.8CVE-2026-114364Apache Syncope: SQL injection via unsanitized opEvent in Audit Events searchVerify fixApache Software Foundation Apache Syncope
    1 min read
  2. 9.8CVE-2026-113687Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypassVerify fixApache Software Foundation Apache Syncope
    1 min read
  3. 9.1CVE-2026-113511Apache Syncope: Delegated administration boundaries can be bypassed for Realm updateVerify fixApache Software Foundation Apache Syncope
    1 min read
  4. 8.8CVE-2026-110535Apache Syncope: AuthProfile value escalation via self-service updateVerify fixApache Software Foundation Apache Syncope
    1 min read
  5. 9.8CVE-2026-109083Apache Syncope: Remote Code Execution via Flowable JUEL expressionVerify fixApache Software Foundation Apache Syncope
    1 min read
Esc