CVE-2026-121454

Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer.handleScimGet that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM endpoints to retrieve...

EUVD-2026-115886

Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer.handleScimGet that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM endpoints to retrieve...

CVE-2026-121454: padloc: Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows…

Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer.handleScimGet that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM endpoints to retrieve...