CVE-2026-63071 | Apache Syncope up to 3.0.16/4.0.6/4.1.1 Groovy Sandbox improper isolation or compartmentalization

July 20, 2026 Yanac

A vulnerability described as problematic has been identified in Apache Syncope up to 3.0.16/4.0.6/4.1.1. Impacted is an unknown function of the component Groovy Sandbox. The manipulation results in improper isolation or compartmentalization.

This vulnerability is identified as CVE-2026-63071. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More