THREATOPS
THREAT OPSThreat News › CVE-2026-75030: Apache Syncope: Incomplete authorization checks for Group members deprovisioning

CVE-2026-75030: Apache Syncope: Incomplete authorization checks for Group members deprovisioning

medoss_secPublished 2026-09-14

<p>Posted by Francesco Chicchiriccò on Sep 14</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Syncope (org.apache.syncope.core.idrepo:syncope-core-idrepo-logic) 3.0.0-M0 through 3.0.16<br /> - Apache Syncope (org.apache.syncope.core.idrepo:syncope-core-idrepo-logic) 4.0.0-M0 through 4.0.7<br /> - Apache Syncope (org.apache.syncope.core.idrepo:syncope-core-idrepo-logic)

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/763