CVE-2026-73470: Apache Syncope: Delegating users can grant unowned Roles
Apache Syncope CVE-2026-73470 lets delegated users grant roles they do not own via crafted delegations.
1 stories, newest first · one card per story
Apache Syncope CVE-2026-73470 lets delegated users grant roles they do not own via crafted delegations.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views