{"uuid": "4554399e-ca6a-42be-8d42-381264c1fab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78330", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjs3hr62f2e", "content": "Apache Syncope faces a CRITICAL privilege escalation flaw (CVE-2026-78330) when JWKS is exposed. Versions 3.0.0-M0 \u2013 3.0.16, 4.0.0-M0 \u2013 4.0.7, 4.1.0-M0 \u2013 4.1.2 affected. Upgrade to 4.0.8/4.1.3 ASAP. https://radar.offseq.com/threat/incorrect-privilege-assignment-vulnerability-in-apache-syncope-cve...", "creation_timestamp": "2026-09-15T04:30:33.743973Z"}