VYPR

padloc

by Padloc

CVEs (1)

  • CVE-2026-121454LowNov 3, 2026
    risk 0.17cvss 3.7epss —

    Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM…