@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

Apache Syncope faces a CRITICAL privilege escalation flaw (CVE-2026-78330) when JWKS is exposed. Versions 3.0.0-M0 – 3.0.16, 4.0.0-M0 – 4.0.7, 4.1.0-M0 – 4.1.2 affected. Upgrade to 4.0.8/4.1.3 ASAP. https://radar.offseq.com/threat/incorrect-privilege-assignment-vulnerability-in-apache-syncope-cve... https://radar.offseq.com/threat/incorrect-privilege-assignment-vulnerability-in-apache-syncope-cve-2026-78330-b2c023a1d947f76b

2026-09-15T04:30:32.860Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.