CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113511
UNKNOWNCVSS 0NVD feed
Published 2 November 2026 · tracked since 2 November 2026
Description
Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a Realm subtree across administrative realm boundaries without permission for the destination This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 thr
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog