A vulnerability described as problematic has been identified in Apache Syncope up to 3.0.15/4.0.3. This impacts an unknown function of the component Keymaster. Executing a manipulation can lead to xml external entity reference.
This vulnerability is handled as CVE-2026-23795. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
