NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#cve-2026-73668

0 stories this week · 0 this month · 1 in 6 months · mostly security

Stories per day · 30 days

1 stories, newest first · one card per story

oss-securitySep 14, 2026

CVE-2026-73668: Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values

Apache Syncope cross-realm authorization flaw lets administrators read confidential ConnId bundle configuration values from realms they should not access (CVE-2026-73668).

apache authorization-bypass

Stories tagged #cve-2026-73668

CVE-2026-73668: Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values