CVE WATCH / VULNERABILITY DETAIL
CVE-2026-114364
UNKNOWNCVSS 0NVD feed
Published 2 November 2026 · tracked since 2 November 2026
Description
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope. This CVE covers an incomplete fix for CVE-2026-77051: an administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitize
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog