https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:45:49.934457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-30665 cnvd-2026-30665 2026-10-08T06:45:49.981247+00:00 cnvd-2026-30665 https://cve.radiocsirt.org/vuln/euvd-2026-339179 EUVD-2026-339179 2026-10-08T06:45:49.981285+00:00 EUVD-2026-339179 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53421 fkie_cve-2026-53421 2026-10-08T06:45:49.981299+00:00

Improper Isolation or Compartmentalization vulnerability in Apache Syncope.

An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' (REST and SQL) capability to run Groovy scripts.

This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1.

Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue by hardening the Groovy security sandbox.

 https://cve.radiocsirt.org/vuln/ghsa-c7pj-2f8j-jc8m GHSA-c7pj-2f8j-jc8m 2026-10-08T06:45:49.981335+00:00

Improper Isolation or Compartmentalization vulnerability in Apache Syncope.

An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors' (REST and SQL) capability to run Groovy scripts.

This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1.

Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue by hardening the Groovy security sandbox.