https://seclists.org/oss-sec/2026/q3/182: CVE-2026-62418: Apache Syncope: Low-privileged authenticated SSRF in Connectors and sources check
Published Jul 20, 2026
·Updated
Affected Software
3 affected components
Apache Syncope>=3.0.0-M0<=3.0.16
Apache Syncope>=4.0.0-M0<=4.0.6
Apache Syncope>=4.1.0-M0<=4.1.1
Frequently Asked Questions
1
What is the severity of CVE-2026-62418?
CVE-2026-62418 has a moderate severity level.
2
What versions of Apache Syncope are affected by CVE-2026-62418?
Affected versions include Apache Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.6, and 4.1.0.
3
How do I fix CVE-2026-62418?
To fix CVE-2026-62418, upgrade to the latest unaffected version of Apache Syncope.
4
What type of vulnerability is CVE-2026-62418?
CVE-2026-62418 is a low-privileged authenticated SSRF vulnerability.
5
When was CVE-2026-62418 published?
CVE-2026-62418 was published on July 20, 2026.