https://seclists.org/oss-sec/2026/q3/179: CVE-2026-53421: Apache Syncope: mote Code Execution via Scripted Connector
Published Jul 20, 2026
·Updated
Affected Software
1 affected component
Apache Syncope>=3.0.0-M0<=3.0.16, >=4.0.0-M0<=4.0.6, >=4.1.0-M0<=4.1.1
Frequently Asked Questions
1
What is the severity of CVE-2026-53421?
CVE-2026-53421 has a moderate severity rating.
2
What versions of Apache Syncope are affected by CVE-2026-53421?
Apache Syncope versions 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.6, and 4.1.0-M0 through 4.1.1 are affected by CVE-2026-53421.
3
How do I fix CVE-2026-53421?
To fix CVE-2026-53421, update to a patched version of Apache Syncope that is not affected by this vulnerability.
4
What kind of vulnerability is CVE-2026-53421?
CVE-2026-53421 is an improper isolation or compartmentalization vulnerability in Apache Syncope.
5
Who can exploit CVE-2026-53421?
An administrator with adequate entitlements can exploit CVE-2026-53421.