CVE-2026-109083None▾ SunlitImproper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process conta…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Improper isolation or compartmentalization vulnerability in Apache Syncope.
An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process containing a JUEL expression is imported and started, the expression is executed directly on the server, with no sandbox.
This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0 through 4.1.3.
Users are recommended to upgrade to version 4.0.9 / 4.1.4, which fix this issue by rejecting BPMN definitions including expression attributes.
org.apache.syncope.ext.flowable:syncope-ext-flowable-bpmn >= 3.0.0-M0 <= 3.0.16org.apache.syncope.ext.flowable:syncope-ext-flowable-bpmn >= 4.0.0-M0 <= 4.0.8org.apache.syncope.ext.flowable:syncope-ext-flowable-bpmn >= 4.1.0 <= 4.1.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113687NoneApache Syncope: RCE via ProcessGroovyMethodsSandbox bypass
CVE-2026-120306Critical· 9.9Beta9 build sandbox escape via chroot-only isolation
CVE-2026-119408High· 8.8n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes
CVE-2026-115517Medium· 6.4Unrestricted network access between execution contexts in KNIME Business Hub
CVE-2026-115416High· 7.7Incorrect authorization checks in Amazon Athena engine version 3 query processing
CVE-2026-114087High· 8.1Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets