{"uuid": "87d18b01-19b3-41c6-ae4b-b6f787fd2504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78330", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117273174374332264", "content": "CVE-2026-78330 | CRITICAL: Apache Syncope vuln allows admin escalation if JWKS is exposed and JWT auth used. Affects 3.0.0-M0 \u2013 3.0.16, 4.0.0-M0 \u2013 4.0.7, 4.1.0-M0 \u2013 4.1.2. Upgrade to 4.0.8/4.1.3 to mitigate. Details: https://radar.offseq.com/threat/incorrect-privilege-assignment-vulnerability-in-apache-syncope-cve-2026-78330-b2c023a1d947f76b #OffSeq #Vulnerability #ApacheSyncope", "creation_timestamp": "2026-09-15T04:30:31.231363Z"}