https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:06:36.699760+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-30664 cnvd-2026-30664 2026-10-05T15:06:36.751209+00:00 cnvd-2026-30664 https://cve.radiocsirt.org/vuln/euvd-2026-339178 EUVD-2026-339178 2026-10-05T15:06:36.751263+00:00 EUVD-2026-339178 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57308 fkie_cve-2026-57308 2026-10-05T15:06:36.751278+00:00

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Syncope.

An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort parameters.

This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1.

Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue.

 https://cve.radiocsirt.org/vuln/ghsa-vqgw-p6qv-w77q GHSA-vqgw-p6qv-w77q 2026-10-05T15:06:36.751315+00:00

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Syncope.

An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort parameters.

This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1.

Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue.