Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:08:54 +0000 cnvd-2026-30665 https://cve.radiocsirt.org/vuln/cnvd-2026-30665 cnvd-2026-30665 https://cve.radiocsirt.org/vuln/cnvd-2026-30665 EUVD-2026-339179 https://cve.radiocsirt.org/vuln/euvd-2026-339179 EUVD-2026-339179 https://cve.radiocsirt.org/vuln/euvd-2026-339179 fkie_cve-2026-53421 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53421 <p>Improper Isolation or Compartmentalization vulnerability in Apache Syncope.</p> <p>An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors&#39; (REST and SQL) capability to run Groovy scripts.</p> <p>This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1.</p> <p>Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue by hardening the Groovy security sandbox.</p> <p>Improper Isolation or Compartmentalization vulnerability in Apache Syncope.</p> <p>An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors&#39; (REST and SQL) capability to run Groovy scripts.</p> <p>This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1.</p> <p>Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue by hardening the Groovy security sandbox.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53421 GHSA-c7pj-2f8j-jc8m https://cve.radiocsirt.org/vuln/ghsa-c7pj-2f8j-jc8m <p>Improper Isolation or Compartmentalization vulnerability in Apache Syncope.</p> <p>An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors&#39; (REST and SQL) capability to run Groovy scripts.</p> <p>This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1.</p> <p>Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue by hardening the Groovy security sandbox.</p> <p>Improper Isolation or Compartmentalization vulnerability in Apache Syncope.</p> <p>An administrator with adequate entitlements can achieve remote code execution through the connector subsystem by relying on scripted connectors&#39; (REST and SQL) capability to run Groovy scripts.</p> <p>This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1.</p> <p>Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue by hardening the Groovy security sandbox.</p> https://cve.radiocsirt.org/vuln/ghsa-c7pj-2f8j-jc8m