CVE-2026-114364 | Apache Syncope up to 3.0.16/4.0.8/4.1.3 opEvent sql injection

November 2, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Apache Syncope up to 3.0.16/4.0.8/4.1.3. This affects an unknown function. The manipulation of the argument opEvent results in sql injection.

This vulnerability is reported as CVE-2026-114364. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More