UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-110535
Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3. Users are recommended to upgrade to version 4.0.9 / 4.1.4, which fix this issue.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-02T16:55:11.069321+00:00
- Cve id
- CVE-2026-110535
- First seen by Signal
- 2026-11-02T16:50:29+00:00
- Retrieved at
- 2026-11-02T16:56:00+00:00
- Published at
- 2026-11-02T14:17:35.270
- Last modified
- 2026-11-02T16:12:04.590
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph