CVE-2026-109083 | Apache Syncope up to 3.0.16/4.0.8/4.1.3 REST API isolation

A vulnerability was found in Apache Syncope up to 3.0.16/4.0.8/4.1.3. It has been declared as problematic. The affected element is an unknown function of the component REST API. Executing a manipulation can lead to improper isolation or compartmentalization.

This vulnerability is registered as CVE-2026-109083. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More