CVE-2026-75030Critical· 9.8▾ MidnightMissing Authorization vulnerability in Apache Syncope. An administrator with task execution entitlements might be able to mass (de)provision group members, regardless of their group-related administration capabilities. This issue…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
— → 9.8
none → critical
0.6%
0.6% → 0.6%
Missing Authorization vulnerability in Apache Syncope.
An administrator with task execution entitlements might be able to mass (de)provision group members, regardless of their group-related administration capabilities.
This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.7, from 4.1.0-M0 through 4.1.2.
Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112375NoneApache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs
CVE-2026-105931Low· 2.3Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other tenants
CVE-2026-105934High· 7.2Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic
CVE-2026-105932Low· 2.3Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints
CVE-2026-105935Medium· 4.9Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission
CVE-2026-105936Medium· 5.3Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint