UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-113511
Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree across administrative realm boundaries without permission for the destination This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3. Users are recommended to upgrade to version 4.0.9 / 4.1.4, which fix this issue.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-02T16:55:11.069321+00:00
- Cve id
- CVE-2026-113511
- First seen by Signal
- 2026-11-02T16:50:29+00:00
- Retrieved at
- 2026-11-02T16:56:00+00:00
- Published at
- 2026-11-02T14:17:35.650
- Last modified
- 2026-11-02T16:12:04.590
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph