Threats tagged 'ghsa-2rr8-vg3r-2q9m'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.6%	CVE-2026-75030Apache Syncope · Missing Authorization Vulnerability Critical9.8EPSS 0.6%2026-09-14GCVE DatabaseCVE-2026-75030 Apache Syncope contains a missing authorization vulnerability (CVE-2026-75030) that allows an administrator with task execution entitlements to mass (de)provision group members without proper group-related administration rights. This affects versions from 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. Upgrading to versions 4.0.8 or 4.1.3 mitigates this issue. EPSS 0.6%Report on CVE-2026-75030 Vulnerability CWE-862 #ghsa-2rr8-vg3r-2q9m	GCVE Database	2026-09-14

Page 1 of 1