VYPR

Helix Authentication Service

by Rogue Wave

CVEs (1)

  • CVE-2026-109758CriOct 13, 2026
    risk 0.60cvss —epss —

    Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In version 25.2, the installation templates contain a default credential which the…