NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#cve-2026-77883

0 stories this week · 0 this month · 1 in 6 months · mostly security

Stories per day · 30 days

1 stories, newest first · one card per story

oss-securitySep 14, 2026

CVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist

Apache Syncope's JEXL template engine permits one-hop navigation past the JexlContextBuilder name denylist, enabling administrator-driven information disclosure.

apache cve-2026-77883

Stories tagged #cve-2026-77883

CVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist