CVE-2026-87785Disclosure

LOWCVSS 9.1 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Authentication bypass by spoofing vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed (at least protocol and key), an attacker can spoof another user's privileges after completing a successful authentication and obtaining a valid JWT. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 through 4.0.7, from 4.1.0-M0 through 4.1.2. Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-290

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://cybersecurity-news.de/apache-syncope-kritische-luecken-jwt-faelschung-cve-2026-87785-cve-2026-87802

Full discourse2 posts

Cybersecurity News DE@cybsecuritynews45d
Disclosure
Updated Post: Apache Syncope: Kritische Lücken erlauben Kontoübernahme per JWT-Fälschung https://cybersecurity-news.de/apache-syncope-kritische-luecken-jwt-faelschung-cve-2026-87785-cve-2026-87802
Post summary
The post announces critical Apache Syncope vulnerabilities linked to CVE-2026-87785 and CVE-2026-87802. It describes the impact as account takeover through JWT forgery but does not mention PoC code, exploits, active exploitation, or remediation.
0000045
12 followersView on X
Cybersecurity News DE@cybsecuritynews45d
Disclosure
#schwachstellen Apache Syncope: Kritische Lücken erlauben Kontoübernahme per JWT-Fälschung #apachesyncope #cve202682232 #cve202686460 #cve202687785 #cve202687802 #jwt #oauth20 #sra https://cybersecurity-news.de/apache-syncope-kritische-luecken-jwt-faelschung-cve-2026-87785-cve-2026-87802
Post summary
The tweet announces multiple CVEs in Apache Syncope (CVE-2026-82232, CVE-2026-86460, CVE-2026-87785, CVE-2026-87802) with technical details on JWT forgery leading to account takeover, but provides no PoC, exploit tool, active exploitation evidence, or remediation guidance.
0000043
12 followersView on X

Explore more

Back to dashboard