Threats tagged 'ghsa-fp6q-c836-37rh'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-77147Apache Syncope · Code Injection Medium6.5EPSS 0.4%2026-09-14GCVE DatabaseCVE-2026-77147 Apache Syncope contains a code injection vulnerability (CVE-2026-77147) that allows an administrator with sufficient privileges to create a malicious Groovy Command class, bypassing the Groovy security sandbox. This affects versions from 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. Upgrading to versions 4.0.8 or 4.1.3 mitigates this issue. EPSS 0.4%Report on CVE-2026-77147 Vulnerability CWE-94 #ghsa-fp6q-c836-37rh	GCVE Database	2026-09-14

Page 1 of 1