https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:54:24.370500+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-12896 cnvd-2026-12896 2026-10-05T23:54:24.437797+00:00 cnvd-2026-12896 https://cve.radiocsirt.org/vuln/euvd-2026-267155 EUVD-2026-267155 2026-10-05T23:54:24.437841+00:00 EUVD-2026-267155 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23795 fkie_cve-2026-23795 2026-10-05T23:54:24.437855+00:00

Improper Restriction of XML External Entity Reference vulnerability in Apache Syncope Console. An administrator with adequate entitlements to create or edit Keymaster parameters via Console can construct malicious XML text to launch an XXE attack, thereby causing sensitive data leakage occurs.

This issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.

Users are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue.

 https://cve.radiocsirt.org/vuln/ghsa-73f3-rqqf-2j54 GHSA-73f3-rqqf-2j54 — Apache Syncope: Console XXE on Keymaster parameters 2026-10-05T23:54:24.437891+00:00

Affected: Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-console

Improper Restriction of XML External Entity Reference vulnerability in Apache Syncope Console. An administrator with adequate entitlements to create or edit Keymaster parameters via Console can construct malicious XML text to launch an XXE attack, thereby causing sensitive data leakage occurs.

This issue affects Apache Syncope: from 3.0 through 3.0.15, from 4.0 through 4.0.3.

Users are recommended to upgrade to version 3.0.16 / 4.0.4, which fix this issue.